note 31989 deleted from security.database by didou
| From: | didou@php.net | Date: | Wed, 22 Oct 2003 09:25:17 +0000 |
| Subject: | note 31989 deleted from security.database by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-59106@lists.php.net to get a copy of this message | ||
Note Submitter: costa@NOSPAM.ca
----
We're told that ';' and '--' are potentially dangerous strings because of
their special significance to MySQL. But we're not told how to defend against them.
We can't really search and replace those strings because they may be valid (e.g. in msg board
post). Addslashes() doesn't touch them.
So I'm still scratching my head -- should be worry about those strings? If so, how?