note 107402 added to reserved.variables.get

In reply to zgold at 10-Aug-2011 01:58. Using just htmlentities to "secure" your data will not protect you from SQL injections. Slashes are not escaped by the "htmlentities" function, if this is currently your only line of defence, you are vulnerable for SQL injections! To "secure" your data within this context, look into mysql_real_escape_string. Alternatively, feel free to read into "prepared statements". Please note that mysql_real_escape_string is not a replacement for htmlentities, they can be used together depending on your requirements. - Gerard ---- Server IP: 208.69.120.55 Probable Submitter: 83.87.181.228 ---- Manual Page -- http://www.php.net/manual/en/reserved.variables.get.php Edit -- https://master.php.net/note/edit/107402 Del: integrated -- https://master.php.net/note/delete/107402/integrated Del: useless -- https://master.php.net/note/delete/107402/useless Del: bad code -- https://master.php.net/note/delete/107402/bad+code Del: spam -- https://master.php.net/note/delete/107402/spam Del: non-english -- https://master.php.net/note/delete/107402/non-english Del: in docs -- https://master.php.net/note/delete/107402/in+docs Del: other reasons-- https://master.php.net/note/delete/107402 Reject -- https://master.php.net/note/reject/107402 Search -- https://master.php.net/manage/user-notes.php