Re: PHP security
| From: | Justin Patrin | Date: | Tue, 17 Jan 2006 18:39:12 +0000 |
| Subject: | Re: PHP security | ||
| References: | 1 | Groups: | php.pear.general |
| Request: | Send a blank email to pear-general+get-22562@lists.php.net to get a copy of this message | ||
On 1/16/06, Skye Poier <skye@f4.ca> wrote:
> I'm copying the values from QuickForm $form->getSubmitValue() into
> DataObjects and then calling the objects' update() method to update the
> database, does it handle all quoting for me? Am I pretty much safe
> from SQL injection attacks using this method?
>
Yes, DB_DO handles quoting automatically.
--
Justin Patrin