Re: $_SERVER['REMOTE_ADDR'] and sql injection
| From: | Peter Lind | Date: | Wed, 23 Jun 2010 06:59:34 +0000 |
| Subject: | Re: $_SERVER['REMOTE_ADDR'] and sql injection | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-306330@lists.php.net to get a copy of this message | ||
On 23 June 2010 08:53, Tanel Tammik <keevitaja@gmail.com> wrote:
> Hi,
>
> is there a vulnerability with using $_SERVER['REMOTE_ADDR'] in sql queries?
>
With any and all input to sql queries: escape the input. Then you
don't have to ask the question.
Regards
Peter
--
<hype>
WWW: http://plphp.dk / http://plind.dk
LinkedIn: http://www.linkedin.com/in/plind
BeWelcome/Couchsurfing: Fake51
Twitter: http://twitter.com/kafe15
</hype>