note 16941 added to function.mysql-query
| From: | zl at php2 dot chek dot com | Date: | Mon, 19 Nov 2001 19:17:03 +0000 |
| Subject: | note 16941 added to function.mysql-query | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-21025@lists.php.net to get a copy of this message | ||
always clean up your post/get variables before using them in mysql_query. example:
$myvariable=trim(htmlspecialchars(addslashes($myvariable)));
zl.
--
http://www.php.net/manual/en/function.mysql-query.php
http://master.php.net/manage/user-notes.php?action=edit+16941
http://master.php.net/manage/user-notes.php?action=delete+16941
http://master.php.net/manage/user-notes.php?action=reject+16941