sql injection

Hi

anybody have good function codes to prevent sql injection?


Thanks

You can use mysql_real_escape_string() to prevent SQL injection.

http://us.php.net/mysql_real_escape_string

You can also check user input against the ctype_ functions. This can prevent SQL injection as well because the input must ONLY contain what the ctype allows. But otherwise, just use mysql_real_escape_string().

http://us2.php.net/ctype