note 80464 deleted from security.database.sql-injection by nlopess
| From: | nlopess@php.net | Date: | Thu, 17 Jan 2008 16:56:50 +0000 |
| Subject: | note 80464 deleted from security.database.sql-injection by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-135171@lists.php.net to get a copy of this message | ||
Note Submitter: ja4chem at yahoo dot co dot uk
----
SQL injection could be prevented by inserting only base64_encoded data into the data base. Before
searching the data base for a certain value or string base64_encode the search string and then start
the query.