Have a function called security() and then run the supplied field through things like

function security($value) {
$value_1 =htmlentities(mysql_real_escape_string($value));

return $value_1;

}

would that work? Also are there any other forms of security you would recomend using.

Have a function called security() and then run the supplied field through things like

function security($value) {
$value_1 =htmlentities(mysql_real_escape_string($value));

return $value_1;

}

would that work? Also are there any other forms of security you would recomend using.

http://blog.php-security.org/

save yourself one variable, re-use $value

cheers,

http://blog.php-security.org/

save yourself one variable, re-use $value

cheers,


function security($value) {
return htmlentities(mysql_real_escape_string($value));
}


Or don't use any.

function security($value) {
return htmlentities(mysql_real_escape_string($value));
}
Or don't use any.

;)

yeah but at this point, there is no need to have a function of one line :cool:

;)

yeah but at this point, there is no need to have a function of one line :cool:

Only that htmlentities(mysql_real_escape_string()); is a lot to type if you're using it a lot. It would make it easier to maintain the future. If you were to move platform or needed to stip something else, like adding a profanity filter.

Only that htmlentities(mysql_real_escape_string()); is a lot to type if you're using it a lot. It would make it easier to maintain the future. If you were to move platform or needed to stip something else, like adding a profanity filter.

100% right