Thread: Tech mysql_real_escape_string question
View Single Post
Old 08-11-2022, 09:40 AM  
k0nr4d
Confirmed User
 
k0nr4d's Avatar
 
Industry Role:
Join Date: Aug 2006
Location: Poland
Posts: 9,228
Quote:
Originally Posted by Klen View Post
I am using htmlspecialchars and so far it is working fine. But it does not hurt to put extra steps to harden security.
That's not enough to stop sql injection. htmlspecialchars is enough for XSS.
k0nr4d is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote