|
Posted by R. Rajesh Jeba Anbiah on 05/06/06 21:46
frizzle wrote:
> Rafe Culpin wrote:
> > In article <1146739267.490563.178550@y43g2000cwc.googlegroups.com>,
> > phpfrizzle@gmail.com (frizzle) wrote:
<snip>
> AFAIK using mysql_real_escape_string deals with that in all cases
> if i parse any input through that... Thanks for reminding though how
> important that is!
<snip>
PHP saints are moving away from mysql_real_escape_string() to
prepared statements
<http://ilia.ws/archives/103-mysql_real_escape_string-versus-Prepared-Statements.html>
FWIW, For login system
<news:1110991855.257652.244240@z14g2000cwz.googlegroups.com> (
http://groups.google.com/group/comp.lang.php/msg/310fad0eef59415a? )
--
<?php echo 'Just another PHP saint'; ?>
Email: rrjanbiah-at-Y!com Blog: http://rajeshanbiah.blogspot.com/
Navigation:
[Reply to this message]
|