Re: Secure data management
| From: | Stuart Dallas | Date: | Tue, 04 Oct 2011 19:29:47 +0000 |
| Subject: | Re: Secure data management | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-315128@lists.php.net to get a copy of this message | ||
On 4 Oct 2011, at 20:23, Jim Giner wrote:
> I thought I knew how to do this.
>
> I have a form that collects some data fields. My script checks if magic
> quotes are off and (since they are) executes "addslashes" on each input
> field. Then I run a query to INSERT these 'slashed' vars into the database.
> But when I go to phpadmin on my site the table does not contain any slashes.
>
> Where are they going?
1. Why are you using addslashes?
2. MySQL will strip one level of backslashes.
-Stuart
--
Stuart Dallas
3ft9 Ltd
http://3ft9.com/