Re: Data sanitation for mysql queries.

From	"Peter H. Coffin" <hellsop@ninehells.com>
Newsgroups	comp.lang.php
Subject	Re: Data sanitation for mysql queries.
Date	2012-11-17 19:47 -0600
Organization	A noiseless patient Spider
Message-ID	<slrnkagfid.4ja.hellsop@nibelheim.ninehells.com> (permalink)
References	<56c7dfc2-c368-4403-8d7d-19233367f2c2@googlegroups.com> <k86287$i8i$1@dont-email.me> <b5d58a67-e183-4792-9e17-f16ce6f451b2@googlegroups.com>

Show all headers | View raw

On Fri, 16 Nov 2012 11:36:18 -0800 (PST), cph wrote:

> I am not asking about validation that is a whole other topic. This is
> specifically about sanitation. The problem with real_escape_string is
> from what I have read its not good enough to prevent sql injections.

Where did you read that? It's better than add_slashes because it's
actually AWARE of the connection parameters, like what the actual escape
character is. 

-- 
54. I will not strike a bargain with a demonic being then attempt to 
    double-cross it simply because I feel like being contrary.
	--Peter Anspach's list of things to do as an Evil Overlord

Back to comp.lang.php | Previous | Next — Previous in thread | Find similar | Unroll thread

Thread

Data sanitation for mysql queries. cph <cloudpresshosting@gmail.com> - 2012-11-16 10:10 -0800
  Re: Data sanitation for mysql queries. Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2012-11-16 10:49 -0800
  Re: Data sanitation for mysql queries. Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-16 13:56 -0500
    Re: Data sanitation for mysql queries. cph <cloudpresshosting@gmail.com> - 2012-11-16 11:36 -0800
      Re: Data sanitation for mysql queries. Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-16 16:46 -0500
      Re: Data sanitation for mysql queries. "Peter H. Coffin" <hellsop@ninehells.com> - 2012-11-17 19:47 -0600

csiph-web