Hi, I'm trying to figure out the best way to sanitize a text field of
data that is to be saved to a mysql database.
I have tried the Sanitize->sql() function which adds slashes to any
characters that might be interpreted as sql. But then when displaying
this data I'm not quite sure how to strip out only those added
slashes, as I will probably allow legitimate slashes as well in the
text.

I have also tried the Sanitize->html function but I'm not sure if html
entities are safe for SQL.

I'm wondering the best practice is for saving and re-displaying data
such as this.

Thanks in advance for the support.

-Travis

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to