note 99878 added to function.mysql-real-escape-string

Also don't forget to escape $_COOKIE array before quering the database. In firefox you can edit cookies and insert and inject harmful sql queries. A user before posted a way to make safe all posts and gets. I am doing this also with cookies: foreach ($_POST as $key => $value) { if(get_magic_quotes_gpc()) $_POST[$key]=stripslashes($value); $_POST[$key] = mysql_real_escape_string($value); } foreach ($_GET as $key => $value) { if(get_magic_quotes_gpc()) $_GET[$key]=stripslashes($value); $_GET[$key] = mysql_real_escape_string($value); } foreach ($_COOKIE as $key => $value) { if(get_magic_quotes_gpc()) $_COOKIE[$key]=stripslashes($value); $_COOKIE[$key] = mysql_real_escape_string($value); } ---- Server IP: 69.147.83.197 Probable Submitter: 89.122.129.56 ---- Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php Edit -- https://master.php.net/note/edit/99878 Del: integrated -- https://master.php.net/note/delete/99878/integrated Del: useless -- https://master.php.net/note/delete/99878/useless Del: bad code -- https://master.php.net/note/delete/99878/bad+code Del: spam -- https://master.php.net/note/delete/99878/spam Del: non-english -- https://master.php.net/note/delete/99878/non-english Del: in docs -- https://master.php.net/note/delete/99878/in+docs Del: other reasons-- https://master.php.net/note/delete/99878 Reject -- https://master.php.net/note/reject/99878 Search -- https://master.php.net/manage/user-notes.php