Re: [PHP] Re: Protecting MySQL Injection from PHP form

2007-05-25 Thread Jason Pruim
On May 25, 2007, at 10:44 AM, Darren Whitlen wrote: Jared Farrish wrote: On 5/25/07, Jason Pruim <[EMAIL PROTECTED]> wrote: I apologize for posting the entire add script, but I wasn't sure what was needed to check if I was doing it right or not. I figured in this case it was better to g

Re: [PHP] Re: Protecting MySQL Injection from PHP form

2007-05-25 Thread Jason Pruim
On May 25, 2007, at 8:47 AM, Jochem Maas wrote: check this, check that. granted the OP posted quite a bit of irrelevant code with regard to SQL injection protection. BUT his use of parameterized queries should protect against injection because MySQL knows what to do with the data (i.e. esc

Re: [PHP] Re: Protecting MySQL Injection from PHP form

2007-05-25 Thread Jochem Maas
check this, check that. granted the OP posted quite a bit of irrelevant code with regard to SQL injection protection. BUT his use of parameterized queries should protect against injection because MySQL knows what to do with the data (i.e. escape it), which only leaves the question as to whether th