Re: escape your variables
| From: | Chris | Date: | Thu, 05 Mar 2009 02:55:43 +0000 |
| Subject: | Re: escape your variables | ||
| References: | 1 2 3 4 5 6 7 8 9 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-289329@lists.php.net to get a copy of this message | ||
Eric Butera wrote:
On Wed, Mar 4, 2009 at 8:18 PM, Chris <dmagick@gmail.com> wrote:Isn't that what I said? -- Postgresql & php tutorials http://www.designmagick.com/You only need to escape data coming from a user going in to your database.If you put user input into your database and pull it back out, it's still raw user input. Never trust any piece of data ever, whether it comes from a superglobal OR within your app itself.