Digital Citizen: Using MySQL in PHP (Basic Intro)
-
Jacques Marneweck · 6 months agoCan you rather show users how to properly escape data before inserting / querying the database? For example one can do some sql injection. For example using mysql_real_escape_string() against strings, etc. using (int)$integer, etc. etc.
-
Wogan · 6 months agoWell, this was only a basic intro. And personally, I prefer mass-sanitizing input data during script startup (you don't miss anything that way) - there's another tutorial on that somewhere in my draft bin, lol.