Re: Sending a message
| From: | Negin Nickparsa | Date: | Fri, 05 Aug 2011 05:48:10 +0000 |
| Subject: | Re: Sending a message | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-314382@lists.php.net to get a copy of this message | ||
it is better to use this one:
http://www.php.net/mysql_real_escape_string
if you don't use this by inputting just a qoute or this input '--'
a hacker can easily hack your syntax
in another steps your site will send a message like:
error in mysql on this line lob lob ..
in this part he will find your server that it is my sql:D
he/she will try anither syntaxes and by errors he/she finds your table names
and ...:D
you know how bad:D
then obey the security rules