Results 1 to 28 of 28

Thread: prevent sql injections

Threaded View

  1. Jul 2nd, 2009, 10:38 AM #1
    sridharao
    sridharao is offline

    Thread Starter
    Lively Member sridharao's Avatar
    Join Date
    Feb 2007
    Posts
    106

    prevent sql injections

    There are scores of articles out there on this, the more I read the more I get confused. Can anyone here explain in clear "classroom-like" manner about the basics involved.

    All I have been doing to the posted form elements is to add stripslashes() not knowing if it is sufficient.

    There are magic_quotes, mysql_real_escape_strings, htmlentities() or htmlspecialchars() etc.etc. I have a confusion on their usage. How and when should these be used? Which is more appropriate and when?
    Last edited by sridharao; Jul 2nd, 2009 at 11:41 AM.
    Save trees, avoid plastics, say no to zoo, go veg, recycle as much, live holistic
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules


Click Here to Expand Forum to Full Width