Re: Mysql insert problems
| From: | Burhan Khalid | Date: | Sat, 16 Apr 2005 09:10:23 +0000 |
| Subject: | Re: Mysql insert problems | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-213185@lists.php.net to get a copy of this message | ||
Andy Pieters wrote:
Hi Whilst you are searching the net, you might also want to search for 'sql injection'. This is no joke! Please use the mysql_escape_string on each variable you get from the user side.Use mysql_real_escape_string() instead.