Im working on a site utilizing apaches/mysqp and of course php. Im
working through the basic framwork creating forms to collect user input
and do various searches etc. I was curious as to what most people find
the best way keep thier mysql queries from getting messed up by user
entered dat
I use a special function just for reforming input, but they use the
following bits with PCRE:
$replace_wordwhite = '/[^\w\s]/';
$replace_word = '/\W/';
$replace_num = '/\D/';
$replace_email = '/[^\w\-\.@]/';
Works pretty well and it's quite useful for killing useless input without
returning
On Wednesday 18 April 2001 22:03, you wrote:
> and do various searches etc. I was curious as to what most people find
> the best way keep thier mysql queries from getting messed up by user
> entered data. None of my searches or database data has or needs any
Simply using addslashes () or the mag
3 matches
Mail list logo