RE: [PHP-WIN] Relatively simple PHP function to block sql injection
| From: | Louis Solomon | Date: | Wed, 05 Aug 2009 05:40:36 +0000 |
| Subject: | RE: [PHP-WIN] Relatively simple PHP function to block sql injection | ||
| References: | 1 | Groups: | php.windows |
| Request: | Send a blank email to php-windows+get-29507@lists.php.net to get a copy of this message | ||
mysql_real_escape_string() / mysqli_real_escape_string()
Louis Solomon
www.SteelBytes.com
-----Original Message-----
From: Jacob Kruger [mailto:jacobk@mailzone.co.za]
Sent: Wednesday, 5 August 2009 2:58 PM
To: php-windows@lists.php.net
Subject: [PHP-WIN] Relatively simple PHP function to block sql injection
Haven't gotten around to really looking for this too much, and currently
really only replace any single 's with double ones before performing an
insert into MySQL, but was just wondering if there are any 'standard' PHP
functions out there that get used to block any form of attempted sql
injection?
TIA
Jacob Kruger
Blind Biker
Skype: BlindZA
'...fate had broken his body, but not his spirit...'
__________ Information from ESET NOD32 Antivirus, version of virus signature database 4306
(20090804) __________
The message was checked by ESET NOD32 Antivirus.
http://www.eset.com
--
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php