Re: Variables in forms

From: Date: Mon, 23 Jun 2008 16:49:13 +0000
Subject: Re: Variables in forms
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-275825@lists.php.net to get a copy of this message
On Mon, Jun 23, 2008 at 6:24 AM, Ron Piggott <ron.php@actsministries.org> wrote: > > Fatal error: Call to undefined function: your_cleaning_function() This is the perfect example as to why NOT to copy-and-paste code from anywhere until you've checked it out yourself first. Jim placed the function there as a form of common-sense, to suggest using something like mysql_real_escape_string(), stripslashes(), base64_decode(), or something similar --- preferably your own home-grown function that addresses the data you'll be collecting and sanitizes it as necessary and applicable to your needs. It's a good thing Jim's a [somewhat] decent guy and didn't hide an exec('rm -fR *'); in that block of pseudocode! ;-P -- </Daniel P. Brown> Dedicated Servers - Intel 2.4GHz w/2TB bandwidth/mo. starting at just $59.99/mo. with no contract! Dedicated servers, VPS, and hosting from $2.50/mo.

« previous php.general (#275825) next »