Posted by Mike on 07/14/06 18:31

I have read through lots of messages about database injection but I'm
still a bit confused.

I have a website where users input data either for searching or storing
on a database such as logging in or storing personal data in the
database.

I'm confused what commands to use to make sure commands such as DROP
etc are not entered.

I've seen stripslashes(), addslashes(), striptags() etc. What should
be used?

Thanks

Mike

• Next in forum: Re: database injection
• Prev in forum: Re: "call to undefined function" mysql_error when adding new rows to table
• Thread view: database injection

[Reply to this message]