Posted by seaside on 12/19/06 15:35

bill schrieb:

> 1: Do I need to worry about SQL injection if I do not process the
> incoming free form data ?
>
> 2: Do I need to worry about PHP statements being embedded in the
> free form data ?
>
> 3: if so, what is the best practices to protect my database/site ?

Post an email to me and I'll forward a small wrapper class, which
protects against this problem.

[Back to original message]