Re: Addslashes?

When I mean security, I mean stopping users from being able to enter data into forms that may override your sql. Kind of like buffer overrun attacks. Kind of like inserting a pipe command that would send them your passwd file(like some bad Perl scripts could). > The main purpose of AddSlashes() is so your script does not mess up SQL > queries etc... About security, I do not understand what you mean, maybe > someone else will, sorry. > > Jay > > ----- Original Message ----- > From: "Chris" <php_list@ibcnetwork.net> > To: "php" <php-general@lists.php.net> > Sent: Thursday, September 28, 2000 12:10 PM > Subject: [PHP] Addslashes? > > > Hi, > I have a question about security. > Say I have a form that takes a users input, then I use that to select or > insert data into a mysql table. > What all should be done to that inputed value before acually using it? > Is addslashes() good enough? Are there some special characters that should > never be allowed to stay in the variable? > > Help please, > Thanks > Chris >