note 54897 deleted from control-structures.foreach by danbrown

From: Date: Tue, 28 Apr 2009 13:09:18 +0000
Subject: note 54897 deleted from control-structures.foreach by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-153919@lists.php.net to get a copy of this message
Note Submitter: chris at randomcat dot co dot uk ---- Just as a note - it's generally not enough to just foreach through $_POST or $_GET, then addslashes() (although this often works)... you could be exposing yourself to a bit of nastiness due to magic quotes. See the discussion example 3 of mysql_real_escape_string, for a bit more info: http://uk.php.net/manual/en/function.mysql-real-escape-string.php

« previous php.notes (#153919) next »