Re: How to Protect Against SQL Injection Attacks While Using SQLite?
| From: | Nathan Nobbe | Date: | Sun, 10 Feb 2008 20:21:00 +0000 |
| Subject: | Re: How to Protect Against SQL Injection Attacks While Using SQLite? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269059@lists.php.net to get a copy of this message | ||
On Feb 10, 2008 3:14 PM, NotReally GonnaTell <lithlist@gmail.com> wrote:
> Is there any other way to do this? I'd rather not use PDO.
what version of php are you using and what version of sqlite?
this relevant info from the manual:
Moreover, since PHP 5.1.0 SQLite depends on
PDO<http://www.php.net/manual/en/ref.pdo.php>
and
SQLite 3 is supported through PDO
SQLite<http://www.php.net/manual/en/ref.pdo-sqlite.php>
.
sqlite3 is quite a bit better than 2, and anyway if you dont want to use
pdo there is sqlite_escape_string().
http://www.php.net/manual/en/function.sqlite-escape-string.php
-nathan