Database escape
-
- Posts: 13
- Joined: Thu 3. Jul 2008, 16:41
Database escape
I have designed a form that is supposed to post data that will be parsed and then inserted into the PHPWCMS database. What would be the the preferred way of escaping this data to avoid SQL-insertion issues? Are there already preferred functions in PHPWCMS that I should call to do this or should I use standard methods in PHP?
- Oliver Georgi
- Site Admin
- Posts: 9892
- Joined: Fri 3. Oct 2003, 22:22
- Contact:
Re: Database escape
Use DB Wrapper functions of phpwcms (search for dbQuery) and also use clean_slweg() and/or slweg() to retrieve all POST values.
There is also a function xss_clean(). Have a look at some of the samples inside the system.
Oliver
There is also a function xss_clean(). Have a look at some of the samples inside the system.
Oliver