Re: Avoiding SQL injections: htmlentities() ?
| From: | Chris Shiflett | Date: | Sun, 27 Mar 2005 03:47:36 +0000 |
| Subject: | Re: Avoiding SQL injections: htmlentities() ? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-211650@lists.php.net to get a copy of this message | ||
Chris Ramsay wrote:
This is excellent: http://www.shiflett.org/I'm glad you think so. :-) There's a free article there on SQL injection: http://shiflett.org/articles/security-corner-apr2004 I'm always refining the methods in which I explain things like SQL injection, so my replies on this thread might be as good or better than that article. The article also has user comments at the bottom, so you might find something useful there also. Hope that helps. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/