Comments on snippet: 'data sanitization'

sadus said on 06/Nov/2010

Sat, 06 Nov 2010 01:25:03 UTC

Usage is pretty straight forward: Email: clean($_POST['email'], EMAIL); URL: clean($_POST['url'], URL);

Sun, 07 Nov 2010 00:21:45 UTC

Thx. URL has missing _var

Fri, 12 Nov 2010 04:37:10 UTC

thanks, fixed

Thu, 17 Feb 2011 03:49:12 UTC

Note: mysql_real_escape_string() does not escape % and _. These are wildcards in MySQL if combined with LIKE, GRANT, or REVOKE.