note 114108 added to security.database.sql-injection

You can avoid the sql injection using views and stored procedures. Never give direct access to tables! Stored procedures can be protected by special parameters (e.g user id + password) ---- Server IP: 72.52.91.14 Probable Submitter: 72.52.91.14 ---- Manual Page -- http://php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/114108 Del: integrated -- https://master.php.net/note/delete/114108/integrated Del: useless -- https://master.php.net/note/delete/114108/useless Del: bad code -- https://master.php.net/note/delete/114108/bad+code Del: spam -- https://master.php.net/note/delete/114108/spam Del: non-english -- https://master.php.net/note/delete/114108/non-english Del: in docs -- https://master.php.net/note/delete/114108/in+docs Del: other reasons-- https://master.php.net/note/delete/114108 Reject -- https://master.php.net/note/reject/114108 Search -- https://master.php.net/manage/user-notes.php