Web Hosting Talk







View Full Version : PHP and form security


ChrisF79
11-06-2005, 08:06 PM
Greetings,

I've heard some people talk about how forms with PHP could be insecure if they're going to be used to query a database and that I need to do something to protect them. What do I need to do? Anybody have a link to a tutorial that would help me with this?

Thanks in advance!

Googled
11-06-2005, 08:28 PM
You should read about 'sql injection technique'. Try to search on Google.

Regards,

G

innova
11-07-2005, 11:38 AM
Also read the php.net manual on mysql_real_escape_string if using mysql.

The bottom line is this: NEVER trust user input. You should probably read up on XSS attacks as well.