note 125114 added to security.database.sql-injection

simple way: $injection = 'username" OR 1=1'; $sqlString = 'SELECT * FROM table WHERE user='.json_encode($injection); out: SELECT * FROM table WHERE user="username\" OR 1=1" ---- Server IP: 45.112.84.4 Probable Submitter: 103.51.166.36 (proxied: 2003:e0:d71c:bf00:909f:327b:ce75:3120) ---- Manual Page -- http://php.net/manual/en/security.database.sql-injection.php Edit -- https://master.php.net/note/edit/125114 Del: integrated -- https://master.php.net/note/delete/125114/integrated Del: useless -- https://master.php.net/note/delete/125114/useless Del: bad code -- https://master.php.net/note/delete/125114/bad+code Del: spam -- https://master.php.net/note/delete/125114/spam Del: non-english -- https://master.php.net/note/delete/125114/non-english Del: in docs -- https://master.php.net/note/delete/125114/in+docs Del: other reasons-- https://master.php.net/note/delete/125114 Reject -- https://master.php.net/note/reject/125114 Search -- https://master.php.net/manage/user-notes.php