Posted by www.gerardvignes.com on 12/26/06 21:13

The suggested way to protect user-supplied input to with MySQL involves
using a special PHP function for MySQL:

mysql_real_escape_string (PHP 4 >= 4.3.0, PHP 5)

http://www.php.net/manual/en/function.mysql-real-escape-string.php

This takes the character set used by the database into account.

Gerard Vignes
http://www.GerardVignes.com
Seattle, WA

• Next in forum: MI5 Persecution: Bernard Levin expresses his views
• Prev in forum: MI5 Persecution: who knows about it?
• Thread view: Re: The best way to protect SQL injection?

[Reply to this message]