http://qs321.pair.com?node_id=569458


in reply to Re: encoding to prevent sql injection in both perl and php
in thread encoding to prevent sql injection in both perl and php

I'm storing text, name, address, phone, etc, plus whatever null bytes and other naughtiness the world gives me. I do just need to escape stuff, but I need (want?) to do it in a consistant, documented, predictable way.

I am loath to just try it, as the effort of using MIME encoding is less than the effort of developing a validation suite. :->

  • Comment on Re^2: encoding to prevent sql injection in both perl and php