PDA

View Full Version : SQL Injection Protection


Al_90
01-29-2006, 11:55 PM
can someone give me some tips on securing a login form and other queries, thanks

SpirtOfGrandeur
01-30-2006, 12:44 AM
Make sure you replace all single apostophes, and all semi colons. Dont mind my spelling im on loopy pills.

thesavior
01-30-2006, 01:07 AM
you can use addslashes($str) to make safe for database use.

GJay
01-30-2006, 08:13 AM
or better, mysql_real_escape_string

Al_90
01-30-2006, 10:30 PM
thanks but what is mysql_real_escape_string

vinyl-junkie
01-31-2006, 12:03 AM
mysql_real_escape_string (http://dev.mysql.com/doc/refman/4.1/en/mysql-real-escape-string.html)

RTFM. ;)