Re: Sending a message
| From: | wil prim | Date: | Sat, 06 Aug 2011 05:57:26 +0000 |
| Subject: | Re: Sending a message | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-314384@lists.php.net to get a copy of this message | ||
lol wow ok thanks, Im very new to coding, started html about 2 months ago, so ty for letting me know the security of the language! is there any place where i can read (other than the php manual), about a tutorial on security?
On Aug 04, 2011, at 10:49 PM, Negin Nickparsa <nickparsa@gmail.com> wrote:
it is better to use this one: http://www.php.net/mysql_real_escape_string if you don't use this by inputting just a qoute or this input '--' a hacker can easily hack your syntax in another steps your site will send a message like: error in mysql on this line lob lob .. in this part he will find your server that it is my sql:D he/she will try anither syntaxes and by errors he/she finds your table names and ...:D you know how bad:D then obey the security rules