PHP/Mysql security

From: Date: Thu, 07 Dec 2000 19:13:09 +0000
Subject: PHP/Mysql security
Groups: php.windows 
Request: Send a blank email to php-windows+get-4364@lists.php.net to get a copy of this message
Hi. I'm creating a little application for accessing db from web. I use PHP and mySQl, and have certain forms for collecting info to insert, look for, etc.. In order to prevent some security flaws I want to parse these inputs before forwarding it via "mysql_query". That is, I want to remove some special chars which could be use in a hacking attempt. In Perl there are some useful regexp which must be used ALWAYS if you want a secure cgi/appl. Is there any code for doing that in PHP?? =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

« previous php.windows (#4364) next »