Re: sql injection protection
| From: | marco@behnke.biz | Date: | Tue, 17 Jan 2012 08:28:48 +0000 |
| Subject: | Re: sql injection protection | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-316315@lists.php.net to get a copy of this message | ||
Hi Haluk,
all your mentioned actions secure sql statements against sql injection, but why
invent the wheel another time if you could use prepared statements that do all
this for you?
Storing values with htmlentities escaped in the database is highly discouraged.
It makes searching more complicated.
Marco Behnke
Dipl. Informatiker (FH), SAE Audio Engineer Diploma
Zend Certified Engineer PHP 5.3
Tel.: 0174 / 9722336
e-Mail: marco@behnke.biz
Softwaretechnik Behnke
Heinrich-Heine-Str. 7D
21218 Seevetal
http://www.behnke.biz