Tweeting Again
Apr 07, 2011 — 3275 comments
PHP » Database Interactions — over 13 years ago
In this tutorial we look at the issue of SQL injection, how the attackers use it, the problems that can arise and methods of prevention using PHP.
Comments
fantastic points altogether, you just received brand new|a new} reader. What could you recommend about your submit that you just made some days in the past? Any positive? More Info At: קידום אתרים
Basic conclusion of this tutorial is to wrap your variables that you are passing to a query with mysql_real_escape_string(). Even then, I've read stuff that mysql_real_escape_string() isn't 100% secure. There's other stuff you can do to filter strings and such. There's talk about using stored procedures, but I've seen where stored can be overkill and end up slowing query down.