[PHP] RE: [PHP-WIN] Re: [PHP] Replace of ' in a query

2004-02-17 Thread Svensson, B.A.T. (HKG)
so, and still works fine. Why not stay with a winner? -Original Message- From: Brent Baisley To: carlos castillo Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: 2004-02-17 21:02 Subject: [PHP-WIN] Re: [PHP] Replace of ' in a query Look at the addslashes command. You should always e

Re: [PHP] Replace of ' in a query

2004-02-17 Thread Brent Baisley
Look at the addslashes command. You should always escape the values you are accepting from user input. If you read almost any article on web site security, it will mention something called SQL injection among other things. This is a way to compromise your data. For instance, what if a user enter

Re: [PHP] Replace of ' in a query

2004-02-17 Thread Chris Shiflett
--- carlos castillo <[EMAIL PROTECTED]> wrote: > Hi , i have the following problem, i have a form where a user can input > any text, on that text may be a char is ' char(39) when i try to execute > the sql query, i have an error for that ', i need to replace it for the > html tag, for example " is

[PHP] Replace of ' in a query

2004-02-17 Thread carlos castillo
Hi , i have the following problem, i have a form where a user can input any text, on that text may be a char is ' char(39) when i try to execute the sql query, i have an error for that ', i need to replace it for the html tag, for example " is " or by chr(39) i dont know, and then execute the sql