Re: PDO Prepared Statements and stripslashes
| From: | Rico Secada | Date: | Tue, 21 Dec 2010 18:26:22 +0000 |
| Subject: | Re: PDO Prepared Statements and stripslashes | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-310206@lists.php.net to get a copy of this message | ||
On Tue, 21 Dec 2010 10:32:21 -0500
Adam Richardson <simpleshot@gmail.com> wrote:
> 1. Turn off magic_quotes_gpc if on, as its use has been deprecated.
> 2. Use prepared statements.
> 3. Don't worry about stripping slashes ever again :)
Thank you for a very enlightening answer. I guess I misunderstood
the "PDO automatically quotes.." and the slashes part! :-)
> Adam
>
> --
> Nephtali: A simple, flexible, fast, and security-focused PHP
> framework http://nephtaliproject.com
>