Re: Preventing SQL Injection/ Cross Site Scripting
| From: | Dotan Cohen | Date: | Sat, 21 Apr 2007 18:28:03 +0000 |
| Subject: | Re: Preventing SQL Injection/ Cross Site Scripting | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-253437@lists.php.net to get a copy of this message | ||
On 21/04/07, tedd <tedd@sperling.com> wrote:
At 4:08 AM +0300 4/21/07, Dotan Cohen wrote: I've got a comments form that I'd like to harden against SQL Injection / XSS attacks. The data is stored in UTF-8 in a mysql database. I currently parse the data as such: I highly recommend "Essential PHP Security" by Chris Shiflett -- he covers those issues and more in detail. It's well worth the cost and you can get it used for as little $12.81.Thanks, I see it used on Amazon for $12.81 in like new condition, with another $10 to ship it. I might just do that as I cannot get those books locally. Dotan Cohen http://what-is-what.com/what_is/blog.html http://ultu.com