note 54897 deleted from control-structures.foreach by danbrown
| From: | danbrown@php.net | Date: | Tue, 28 Apr 2009 13:09:18 +0000 |
| Subject: | note 54897 deleted from control-structures.foreach by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-153919@lists.php.net to get a copy of this message | ||
Note Submitter: chris at randomcat dot co dot uk
----
Just as a note - it's generally not enough to just foreach through $_POST or $_GET, then
addslashes() (although this often works)... you could be exposing yourself to a bit of nastiness due
to magic quotes.
See the discussion example 3 of mysql_real_escape_string, for a bit more info: http://uk.php.net/manual/en/function.mysql-real-escape-string.php