The htmlEncode() method, as I recently discovered thanks to Ian, is good to use to prevent malicious inputs from being undesirably reproduced in web pages. Storing inputs in a SQL database presents the same kind of challenge, especially because SQL injection attacks are such nasty things.
Do y'all feel that using htmlEncode() on incoming data to be included in a SQL query is an effective solution to that problem? Steve ------------------------------------------------------- Sponsored by: ThinkGeek at http://www.ThinkGeek.com/ _______________________________________________ Webware-discuss mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/webware-discuss
