Re: How to Protect Against SQL Injection Attacks While Using SQLite?
| From: | Nathan Nobbe | Date: | Sun, 10 Feb 2008 19:46:41 +0000 |
| Subject: | Re: How to Protect Against SQL Injection Attacks While Using SQLite? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269057@lists.php.net to get a copy of this message | ||
On Feb 10, 2008 2:38 PM, NotReally GonnaTell <lithlist@gmail.com> wrote:
> Hello all, I am wondering how I should prevent SQL injection attacks while
> using SQLite, MySQL has the trusted mysqli_real_escape_string,
> but SQLite doesn't have it's own custom function, i've tried str_replace
> in
> my code, but SQLite returns an error whenever I use a '. I've tried
> googling
> around, but I haven't found anything useful.
>
you can use PDO, and its prepared statements.
-nathan