advice on sql injection/XSS prevention
| From: | Bing Du | Date: | Thu, 05 Apr 2007 14:17:25 +0000 |
| Subject: | advice on sql injection/XSS prevention | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-252081@lists.php.net to get a copy of this message | ||
Hi,
I'm not an experienced PHP developer. We're hosting a content management
system that allow authorized people to add PHP contents. Their PHP coding
levels varies. Some are very security sensitive, but some are not. I
want to know if PHP has any ready-to-use funtion to validate form input to
help prevent SQL injection/XSS? So each programmer doesn't have to write
their own form validation code. I'd appreciate any advice or pointers.
Thanks in advance,
Bing