Home
Simon D's Library tagged → View Popular
MySQL Tutorial - SQL Injection
-
Injection Prevention - mysql_real_escape_string()
Lucky for you, this problem has been known for a while and PHP has a specially-made function to prevent these attacks. All you need to do is use the mouthful of a function mysql_real_escape_string.
What mysql_real_escape_string does is take a string that is going to be used in a MySQL query
and return the same string with all SQL Injection attempts safely escaped. Basically, it
will replace those troublesome quotes(') a user might enter with a MySQL-safe substitute, an escaped quote \'.
Selected Tags
Related Tags
Sponsored Links
Ads by Google
Top Contributors
Groups interested in php
Related Lists on Diigo
-
Programming
Items: 59 | Visits: 96
Created by: Julian Knight
-
PHP+Apache+MySQL+PHPCMS学习计划
PHP+Apache+MySQL+PHPCMS学习计划
Items: 37 | Visits: 147
Created by: 刘 正刚
Diigo is about better ways to research, share and collaborate on information. Learn more »
Join Diigo