Hi, I'm trying to figure out the best way to sanitize a text field of data that is to be saved to a mysql database. I have tried the Sanitize->sql() function which adds slashes to any characters that might be interpreted as sql. But then when displaying this data I'm not quite sure how to strip out only those added slashes, as I will probably allow legitimate slashes as well in the text.
I have also tried the Sanitize->html function but I'm not sure if html entities are safe for SQL. I'm wondering the best practice is for saving and re-displaying data such as this. Thanks in advance for the support. -Travis --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Cake PHP" group. To post to this group, send email to cake-php@googlegroups.com To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/cake-php?hl=en -~----------~----~----~----~------~----~------~--~---