Re: $_SERVER['REMOTE_ADDR'] and sql injection
| From: | Adam Richardson | Date: | Wed, 23 Jun 2010 07:03:43 +0000 |
| Subject: | Re: $_SERVER['REMOTE_ADDR'] and sql injection | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-306332@lists.php.net to get a copy of this message | ||
On Wed, Jun 23, 2010 at 2:53 AM, Tanel Tammik <keevitaja@gmail.com> wrote:
> Hi,
>
> is there a vulnerability with using $_SERVER['REMOTE_ADDR'] in sql queries?
>
> Br
> Tanel
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
As long as you treat it with the same caution that you do general form input
(e.g., proper validation, escaping for mysql or using prepared statements,
etc.), you'll be fine ;)
Adam
--
Nephtali: PHP web framework that functions beautifully
http://nephtaliproject.com