Re: [PHP] Filtering data not with mysql...

2011-05-19 Thread Andre Polykanine
/menelion (mostly in Russian) Twitter: http://twitter.com/m_elensule Facebook: http://facebook.com/menelion Original message From: ad...@buskirkgraphics.com ad...@buskirkgraphics.com To: 'Jason Pruim' Date created: , 4:17:55 AM Subject: [PHP] Filtering data not with mysql

RE: [PHP] Filtering data not with mysql...

2011-05-19 Thread admin
[mailto:an...@oire.org] Sent: Thursday, May 19, 2011 7:38 AM To: ad...@buskirkgraphics.com Cc: 'Jason Pruim'; php-general@lists.php.net Subject: Re: [PHP] Filtering data not with mysql... Hi Richard, Oh my... I hate those pdf's :-(( Could someone tell me in some words what do I need to do

Re: [PHP] Filtering data not with mysql...

2011-05-19 Thread tedd
At 2:38 PM +0300 5/19/11, Andre Polykanine wrote: Oh my... I hate those pdf's :-(( Could someone tell me in some words what do I need to do beside mysql_real_escape_string() and Html input sanitizing? Thanks and sorry for the inconvenience) Hi: Here is part of what I wrote for my PHP

Re: [PHP] Filtering data not with mysql...

2011-05-19 Thread Alex Nikitin
For input sanitizing, and this will be helpful to anyone who writes code, listen to dan kaminsky's keynote at The Next Hope. He did a very good job at explaining the landscape of web programming and the essence of SQL injection and XSS, as well as proposed pretty neat ways to fix these. If you

[PHP] Filtering data not with mysql...

2011-05-18 Thread Jason Pruim
Hey Everyone, Probably a simple question but I wanted to make sure I was right before I got to far ahead of my self I have a form that I am working on and this form will be emailed to the recipient for processing (Not stored in a database). When I store in a database, I simply run

RE: [PHP] Filtering data not with mysql...

2011-05-18 Thread admin
To: php-general@lists.php.net Subject: [PHP] Filtering data not with mysql... Hey Everyone, Probably a simple question but I wanted to make sure I was right before I got to far ahead of my self I have a form that I am working on and this form will be emailed to the recipient for processing

Re: [PHP] Filtering data not with mysql...

2011-05-18 Thread Adam Richardson
On Wed, May 18, 2011 at 9:18 PM, Jason Pruim li...@pruimphotography.comwrote: Hey Everyone, Probably a simple question but I wanted to make sure I was right before I got to far ahead of my self I have a form that I am working on and this form will be emailed to the recipient for

Re: [PHP] Filtering data not with mysql...

2011-05-18 Thread Adam Richardson
On Wed, May 18, 2011 at 10:46 PM, Adam Richardson simples...@gmail.comwrote: I'm a security expert by any means, as I've made mistakes in the past that have provided education the hard way! Just to be very clear, this is a mistake (as the rest of the sentence implies), and it should have