Profile
Achievement
engel's Recent SnippetsTagged sql
- All /
« Prev 1 Next »
Pass a user-inputted variable to this function in order to prevent SQL injection. Example:
mysql_query("INSERT INTO table VALUES('" . sql_sanitize($_POST["variable") . "')");
Instead of:
mysql_query("INSERT INTO table VALUES('" . $_POST["var...
34
13912
posted 18 years ago by engel