DISQUS

Digital Citizen: Using MySQL in PHP (Basic Intro)

  • Jacques Marneweck · 6 months ago
    Can you rather show users how to properly escape data before inserting / querying the database? For example one can do some sql injection. For example using mysql_real_escape_string() against strings, etc. using (int)$integer, etc. etc.
  • Wogan · 6 months ago
    Well, this was only a basic intro. And personally, I prefer mass-sanitizing input data during script startup (you don't miss anything that way) - there's another tutorial on that somewhere in my draft bin, lol.