Re: security/sql issues with php

From: Date: Thu, 22 Sep 2005 00:11:13 +0000
Subject: Re: security/sql issues with php
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-222940@lists.php.net to get a copy of this message
Jasper Bryant-Greene wrote:
Anyone else could link to your page with that URL and have the script executed on your page. You can't stop this, so you have to escape and validate the data coming in.
Sorry to reply to my own message, but to clarify, I meant you can't stop others linking to your page with their own choice of GET variables. You can stop the script being executed, by using htmlspecialchars(). -- Jasper Bryant-Greene Freelance web developer http://jasper.bryant-greene.name/

« previous php.general (#222940) next »