Re: Re: Select and $_POST
| From: | Chris Shiflett | Date: | Thu, 10 Nov 2005 01:15:43 +0000 |
| Subject: | Re: Re: Select and $_POST | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-225488@lists.php.net to get a copy of this message | ||
Ben Ramsey wrote:
$clean = array(); $sql = array();Glad to see someone spreading this habit. :-) Thanks, Ben.
if (ctype_alnum($_POST['pass'])) {I think it's fine to cheat a bit with the password and trust the output format of md5(): $clean['pass'] = md5($_POST['pass']); Of course, it is best to use a salt: $salt = 'SHIFLETT'; $clean['pass'] = md5($salt . md5($_POST['pass'] . $salt)); Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/$clean['pass'] = $_POST['pass'];}