note 96695 added to security.database.sql-injection

another way to stop sql injection when you odbc_*: create two users, one has only select permission, the other has only delete, update, and insert permission, so you can use select-only user to call odbc_exec while you don't have to check the sql injection; and you use d/u/i only user to update database by calling odbc_prepare and odbc_execute. ---- Server IP: 69.147.83.197 Probable Submitter: 173.8.168.129 ---- Manual Page -- http://www.php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/96695 Del: integrated -- https://master.php.net/note/delete/96695/integrated Del: useless -- https://master.php.net/note/delete/96695/useless Del: bad code -- https://master.php.net/note/delete/96695/bad+code Del: spam -- https://master.php.net/note/delete/96695/spam Del: non-english -- https://master.php.net/note/delete/96695/non-english Del: in docs -- https://master.php.net/note/delete/96695/in+docs Del: other reasons-- https://master.php.net/note/delete/96695 Reject -- https://master.php.net/note/reject/96695 Search -- https://master.php.net/manage/user-notes.php