Re: is there a problem with php script pulling HTML out of database as it writes the page??
| From: | Robert Cummings | Date: | Thu, 17 Jul 2008 20:56:54 +0000 |
| Subject: | Re: is there a problem with php script pulling HTML out of database as it writes the page?? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-276997@lists.php.net to get a copy of this message | ||
On Thu, 2008-07-17 at 15:46 -0500, Micah Gersten wrote:
> What can help is if one app only has access to it's own DB. Also, for
> mysql, there is the mysql_real_escape_string function for a reason.
Well I agree with that of course... but the post by Stut indicated the
interviewee thought he could punt all DB security to the DBA. Obviously
it's important that the app developer use appropriate programming
techniques to achieve security in conjunction with the DBA.
Cheers,
Rob.
--
http://www.interjinn.com
Application and Templating Framework for PHP