Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.lang.php > #7618
| Path | csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!eternal-september.org!feeder.eternal-september.org!mx04.eternal-september.org!.POSTED!not-for-mail |
|---|---|
| From | "Peter H. Coffin" <hellsop@ninehells.com> |
| Newsgroups | comp.lang.php |
| Subject | Re: Data sanitation for mysql queries. |
| Date | Sat, 17 Nov 2012 19:47:57 -0600 |
| Organization | A noiseless patient Spider |
| Lines | 14 |
| Message-ID | <slrnkagfid.4ja.hellsop@nibelheim.ninehells.com> (permalink) |
| References | <56c7dfc2-c368-4403-8d7d-19233367f2c2@googlegroups.com> <k86287$i8i$1@dont-email.me> <b5d58a67-e183-4792-9e17-f16ce6f451b2@googlegroups.com> |
| Mime-Version | 1.0 |
| Content-Type | text/plain; charset=us-ascii |
| Content-Transfer-Encoding | 7bit |
| Injection-Info | mx04.eternal-september.org; posting-host="95eff61b8f8136989e561408eae2762f"; logging-data="1357"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1+WQwWa23glEz03OZhrhEgS" |
| User-Agent | slrn/0.9.9p1 (OpenBSD) |
| Cancel-Lock | sha1:UoQqNSRC3p7E9i9oB+F5PXHLmyo= |
| Xref | csiph.com comp.lang.php:7618 |
Show key headers only | View raw
On Fri, 16 Nov 2012 11:36:18 -0800 (PST), cph wrote:
> I am not asking about validation that is a whole other topic. This is
> specifically about sanitation. The problem with real_escape_string is
> from what I have read its not good enough to prevent sql injections.
Where did you read that? It's better than add_slashes because it's
actually AWARE of the connection parameters, like what the actual escape
character is.
--
54. I will not strike a bargain with a demonic being then attempt to
double-cross it simply because I feel like being contrary.
--Peter Anspach's list of things to do as an Evil Overlord
Back to comp.lang.php | Previous | Next — Previous in thread | Find similar | Unroll thread
Data sanitation for mysql queries. cph <cloudpresshosting@gmail.com> - 2012-11-16 10:10 -0800
Re: Data sanitation for mysql queries. Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2012-11-16 10:49 -0800
Re: Data sanitation for mysql queries. Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-16 13:56 -0500
Re: Data sanitation for mysql queries. cph <cloudpresshosting@gmail.com> - 2012-11-16 11:36 -0800
Re: Data sanitation for mysql queries. Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-16 16:46 -0500
Re: Data sanitation for mysql queries. "Peter H. Coffin" <hellsop@ninehells.com> - 2012-11-17 19:47 -0600
csiph-web