note 100784 added to security.database.sql-injection

Before executing the mysql sentence you can verity your input data like this: <?php function valid_text($text){ $valid_char="abcdefghijklmnopqrstuv wxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-_. "; $ valid_text =true; for ($i=0;$i<strlen($text);$i++){ if (strpos($valid_char, substr($text,$i,1))===false){ $ valid_text =false; break; } } return($valid_text); } ?> ---- Server IP: 200.36.127.20 Probable Submitter: 200.52.192.218 ---- Manual Page -- http://www.php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/100784 Del: integrated -- https://master.php.net/note/delete/100784/integrated Del: useless -- https://master.php.net/note/delete/100784/useless Del: bad code -- https://master.php.net/note/delete/100784/bad+code Del: spam -- https://master.php.net/note/delete/100784/spam Del: non-english -- https://master.php.net/note/delete/100784/non-english Del: in docs -- https://master.php.net/note/delete/100784/in+docs Del: other reasons-- https://master.php.net/note/delete/100784 Reject -- https://master.php.net/note/reject/100784 Search -- https://master.php.net/manage/user-notes.php