note 33272 deleted from security.database by peehaa
| From: | peehaa@php.net | Date: | Mon, 08 Jul 2013 19:19:25 +0000 |
| Subject: | note 33272 deleted from security.database by peehaa | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-195505@lists.php.net to get a copy of this message | ||
Note Submitter: jjahn at SPAMSUCKS dot signicast dot com
----
I would say one of the best ways to guard against SQL injection is to use the excellent PEAR DB
package. If you prepare() and execute() your queries, PEAR will automagically addslashes and handle
the query depending on your RDBMS. And of course, for repeatable queries prepare and execute will
give you a bit of a readability and speed increase.