note 14522 deleted from function.pg-exec by nlopess

From: Date: Sat, 26 Jun 2004 19:17:28 +0000
Subject: note 14522 deleted from function.pg-exec by nlopess
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-71816@lists.php.net to get a copy of this message
Note Submitter: adamcrume@hotmail.com ---- In response to sterling, if one calls urlencode before inserting a string into the database and urldecode after retrieving it, the security issue is taken care of. One also needs to force variables which should be ints to ints and so forth because once a variable of a type other than string is properly formatted, it is not possible for it to contain malicious data.

« previous php.notes (#71816) next »