Re: Variables in forms
| From: | Daniel Brown | Date: | Mon, 23 Jun 2008 16:49:13 +0000 |
| Subject: | Re: Variables in forms | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-275825@lists.php.net to get a copy of this message | ||
On Mon, Jun 23, 2008 at 6:24 AM, Ron Piggott <ron.php@actsministries.org> wrote:
>
> Fatal error: Call to undefined function: your_cleaning_function()
This is the perfect example as to why NOT to copy-and-paste code
from anywhere until you've checked it out yourself first.
Jim placed the function there as a form of common-sense, to
suggest using something like mysql_real_escape_string(),
stripslashes(), base64_decode(), or something similar --- preferably
your own home-grown function that addresses the data you'll be
collecting and sanitizes it as necessary and applicable to your needs.
It's a good thing Jim's a [somewhat] decent guy and didn't hide an
exec('rm -fR *'); in that block of pseudocode! ;-P
--
</Daniel P. Brown>
Dedicated Servers - Intel 2.4GHz w/2TB bandwidth/mo. starting at just
$59.99/mo. with no contract!
Dedicated servers, VPS, and hosting from $2.50/mo.