Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.lang.php > #11184

Re: Sanitising input

From Sherm Pendley <sherm.pendley@gmail.com>
Newsgroups comp.lang.php
Subject Re: Sanitising input
References <1vh6rvby4n32n$.1rlvhdwm2g874$.dlg@40tude.net> <h9mbk65k9p72ib4ae39t5ahpdhkq22ljrb@4ax.com>
Date 2011-01-30 17:18 -0500
Message-ID <m2oc6y593d.fsf@sherm.shermpendley.com> (permalink)
Organization X-Privat.Org NNTP Server - http://www.x-privat.org

Show all headers | View raw


Ross McKay <au.org.zeta.at.rosko@invalid.invalid> writes:

> On Sun, 30 Jan 2011 14:09:11 +0000, Mad Hatter wrote:
>
>>I'm writing a simple script which will take a users input, save it to a
>>mysql database and then display it. I'm going to use htmlentities() to
>>clean things up which I hope will stop basic attacks but how else should I
>>sanitise my input? 
>
> For databases, your best bet is the advice on this website:
>
> http://bobby-tables.com/

LOL! Someone actually made one of my favorite xkcd strips into a site?
I love it! If you're curious:

  <http://xkcd.com/327/>

sherm--

-- 
Sherm Pendley
                                   <http://camelbones.sourceforge.net>
Cocoa Developer

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Sanitising input Mad Hatter <colin@class31.co.uk> - 2011-01-30 14:09 +0000
  Re: Sanitising input Jerry Stuckle <jstucklex@attglobal.net> - 2011-01-30 23:12 -0500
    Re: Sanitising input Ross McKay <au.org.zeta.at.rosko@invalid.invalid> - 2011-01-31 16:01 +1100
      Re: Sanitising input Jerry Stuckle <jstucklex@attglobal.net> - 2011-01-31 00:10 -0500
  Re: Sanitising input Jerry Stuckle <jstucklex@attglobal.net> - 2011-01-30 16:50 -0500
    Re: Sanitising input Ross McKay <au.org.zeta.at.rosko@invalid.invalid> - 2011-01-31 14:43 +1100
  Re: Sanitising input "P E Schoen" <paul@pstech-inc.com> - 2011-01-30 14:47 -0500
    Re: Sanitising input Felix Saphir <dasr060-usenet@yahoo.de> - 2011-01-30 20:55 +0100
  Re: Sanitising input Sherm Pendley <sherm.pendley@gmail.com> - 2011-01-30 17:18 -0500
    Re: Sanitising input Ross McKay <au.org.zeta.at.rosko@invalid.invalid> - 2011-01-31 14:52 +1100
  Re: Sanitising input Ross McKay <au.org.zeta.at.rosko@invalid.invalid> - 2011-01-31 08:39 +1100

csiph-web