MySQL Forums
Forum List  »  Stored Procedures

Re: Newb needs help SQL Injection prevention
Posted by: Rick James
Date: June 30, 2012 11:56AM

> There's more to SQL injection prevention than calling that function.
OK, Peter; let's make a list.

* Escape strings.
* Don't interpolate without thorough checking (eg, when you substitute a LIMIT value)
* Don't use multi-query that is available in PHP's mysqli.

Options: ReplyQuote


Subject
Views
Written By
Posted
Re: Newb needs help SQL Injection prevention
1027
June 30, 2012 11:56AM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.