Re: Filtering and Escaping (Was: Select and $_POST)
| From: | GamblerZG | Date: | Mon, 14 Nov 2005 22:00:48 +0000 |
| Subject: | Re: Filtering and Escaping (Was: Select and $_POST) | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-225791@lists.php.net to get a copy of this message | ||
Richard Lynch wrote:
If you had anything other than $_OCLEAN in an echo and friends, then you would know you were screwing up.Personally, if I pull something info from the database, then I do not usually sanitize it. Yes, I know it's less secure, but I'm willing to take such (negligible) risk for extra performance. So I sanitize data on input only.