RE: [PHP] mysql input

I agree, but they all provide some level of handling just might not be the 'most correct' way of handling it bastien> Subject: RE: [PHP] mysql input> From: robert@interjinn.com> To: bastien> bastien_k@hotmail.com> CC: nihilismmachine@gmail.com; php-general@lists.php.net> Date: Mon, 18 bastien> Feb 2008 23:31:21 -0500> > > On Mon, 2008-02-18 at 23:19 -0500, Bastien Koert wrote:> bastien> > mysql_real_escape_string()> > addslashes()> > htmlentities()> > > > bastien> take your pick> > That's a bad answer. If he's using MySQL then he SHOULD use> bastien> mysql_real_escape_string(). None of the other functions will fully> protect him from malicious bastien> input.> > Cheers,> Rob.> -- > bastien> .------------------------------------------------------------.> | InterJinn Application Framework bastien> - http://www.interjinn.com |> bastien> :------------------------------------------------------------:> | An application and templating bastien> framework for PHP. Boasting |> | a powerful, scalable system for accessing system services |> bastien> | such as forms, properties, sessions, and caches. InterJinn |> | also provides an extremely bastien> flexible architecture for |> | creating re-usable components quickly and easily. |> bastien> `------------------------------------------------------------'> _________________________________________________________________