Hi,

How safe is to allow users to submit the entries with single or doube quotations to the database?

and wondering is there any free site or service to check vunerabilities of the site?

Hope to see it in daniweb.

Thanks!

Recommended Answers

All 3 Replies

Use mysql_real_escape_string an all user entered data and any string that needs to have characters escaped.

Thanks!
can you guide me
apart from mysql injection, is there any known security risk wih php and mysql?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.