note 99878 deleted from function.mysql-real-escape-string by philip
| From: | philip@php.net | Date: | Fri, 04 Sep 2015 20:01:11 +0000 |
| Subject: | note 99878 deleted from function.mysql-real-escape-string by philip | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-203670@lists.php.net to get a copy of this message | ||
Note Submitter: paralescuoctavian at gmail dot com
----
Also don't forget to escape $_COOKIE array before quering the database. In firefox you can edit
cookies and insert and inject harmful sql queries.
<?php
foreach ($_COOKIE as $key => $value) {
if(get_magic_quotes_gpc()) $_COOKIE[$key]=stripslashes($value);
$_COOKIE[$key] = mysql_real_escape_string($value);
}
?>