PHP/Mysql security
| From: | RoMaN SoFt / LLFB !! | Date: | Thu, 07 Dec 2000 19:13:09 +0000 |
| Subject: | PHP/Mysql security | ||
| Groups: | php.windows | ||
| Request: | Send a blank email to php-windows+get-4364@lists.php.net to get a copy of this message | ||
Hi.
I'm creating a little application for accessing db from web. I use
PHP and mySQl, and have certain forms for collecting info to insert,
look for, etc..
In order to prevent some security flaws I want to parse these inputs
before forwarding it via "mysql_query". That is, I want to remove some
special chars which could be use in a hacking attempt.
In Perl there are some useful regexp which must be used ALWAYS if you
want a secure cgi/appl. Is there any code for doing that in PHP??
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
** RoMaN SoFt / LLFB **
roman@madrid.com
http://pagina.de/romansoft
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~