RE: [PHP] does magic_quotes_gpc prevents sql injection through forms?(SOLVED)
| From: | Reinhart Viane | Date: | Mon, 11 Sep 2006 12:19:00 +0000 |
| Subject: | RE: [PHP] does magic_quotes_gpc prevents sql injection through forms?(SOLVED) | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-241580@lists.php.net to get a copy of this message | ||
Thx a lot
-----Oorspronkelijk bericht-----
Van: Dave Goodchild [mailto:buddhamagnet@gmail.com]
Verzonden: maandag 11 september 2006 14:10
Aan: Reinhart Viane
CC: php-general@lists.php.net
Onderwerp: Re: [PHP] does magic_quotes_gpc prevents sql injection through
forms?
Yes. Always treat incoming data as if it were tainted. How rigorous you are
is up to you, but check for required fields, then validate them (type, size
etc) and finally escape before database entry.
>
> http://www.projectkarma.co.uk
>
>
--
http://www.web-buddha.co.uk
http://www.projectkarma.co.uk