note 14522 deleted from function.pg-exec by nlopess
| From: | nlopess@php.net | Date: | Sat, 26 Jun 2004 19:17:28 +0000 |
| Subject: | note 14522 deleted from function.pg-exec by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-71816@lists.php.net to get a copy of this message | ||
Note Submitter: adamcrume@hotmail.com
----
In response to sterling, if one calls urlencode before inserting a string into the database and
urldecode after retrieving it, the security issue is taken care of. One also needs to force
variables which should be ints to ints and so forth because once a variable of a type other than
string is properly formatted, it is not possible for it to contain malicious data.