Re: [PHP] preventing sql injections

[Anders Thoresson]

addslashes should be enough and put qoutes arround your strings in the sql

Meaning that a query like this one is safe, as long as I first have $e_namn = addslashes($e_namn);?

$query = "INSERT INTO addr (last_name, first_name, email) VALUES(\"$e_namn\",\"$f_namn\",\"$email\")";


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php