note 65948 deleted from security.database by googleguy

Note Submitter: somebody at whocares dot com ---- Encrypting user input doesn't do much to guard against SQL injection attacks. Naturally, you want to encrypt sensitive information across the wire, but if a user puts in malicious data into an input field, any encryption scheme will just dutifully unpack it at the other and and still run the SQL injection hack if you haven't guarded against it. Encryption is not magic pixie dust to sprinkle on things to make them more secure.