Reply to thread

Message: <blockquote data-quote="sri_lion" data-source="post: 3339864" data-attributes="member: 4103">Your code must be clean to prevent the vulnerability of your forms! And must process every connection handler through a proper procedure!For example in PHP you have some functions you can use for this.. like [CODE]mysql_escape_string mysql_real_escape_string()stripslashesaddslashes[/CODE]So after implementing these you can define what character sets to use in that particular even or function so whatever SQL commends goes out of scope would not entertained!Here's an example![CODE]<?phpif (!function_exists("GetSQLValueString")) {function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "") {  $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;  $theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);  switch ($theType) {    case "text":      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";      break;        case "long":    case "int":      $theValue = ($theValue != "") ? intval($theValue) : "NULL";      break;    case "double":      $theValue = ($theValue != "") ? "'" . doubleval($theValue) . "'" : "NULL";      break;    case "date":      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";      break;    case "defined":      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;      break;  }  return $theValue;}}... rest of the code[/CODE]</blockquote>

Verification: Dahaya deken beduwama keeyada?

Top Bottom