Re: [PHP] User data validation

2002-08-19 Thread Rasmus Lerdorf
You do not need to revalidate. The data is not coming from the user. On Mon, 19 Aug 2002, Randy Johnson wrote: > I have a proccess where a user submits the data, data is run through checks, > validation etc , then stored in a session. then the user goes to > confirmation page where they hit s

Re: [PHP] User data validation

2002-08-19 Thread Randy Johnson
I have a proccess where a user submits the data, data is run through checks, validation etc , then stored in a session. then the user goes to confirmation page where they hit submit to verify the details are correct. when they hit submit they go to another script that pulls the session variables

Re: [PHP] User data validation

2002-08-19 Thread Rasmus Lerdorf
No checks are needed. PHP automatically escapes single quotes for MySQL queries assuming you have magic_quotes_gpc on, which means that if you want to send the same thing by email using PHP's mail() function you just have to call stripslashes() on the data. There are no magical characters that w