note 48649 rejected from security.database.sql-injection by nlopess
| From: | nlopess@php.net | Date: | Mon, 03 Jan 2005 13:10:32 +0000 |
| Subject: | note 48649 rejected from security.database.sql-injection by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-82642@lists.php.net to get a copy of this message | ||
Note Submitter: moitio at gmail dot com
----
Correct me if I'm wrong but doesn't html entities (ent_quotes) work just aswell?
<?php
$foo = " ' & ' OR 1=1=-";
$foo = htmlentities($foo,ENT_QUOTES);
echo $foo;
//Returns ' & ' OR 1=1=-
?>