avoiding SQL injection in PHP

Philippines
March 29, 2010 7:57am CST
can anybody give some information how to avoid SQL injection in PHP MySQL?
1 response
Langstra
@Langstra (16)
• Netherlands
31 Mar 10
Stripe the tags when a form gets submitted. Write a function to do this. function stripe_tags($text) { $tekst = strip_tags($text); $tekst = htmlspecialchars($text); return $text; } And use the fucntion. $name=stripe_tags($_POST["name"]);