Re: postgreSQL web form; Security

From: Rod Taylor <rbt(at)rbt(dot)ca>
To: Davi Leal <davileal(at)terra(dot)es>
Cc: pgsql-php(at)postgresql(dot)org, web-dev(at)gnuherds(dot)org
Subject: Re: postgreSQL web form; Security
Date: 2003-07-19 02:16:25
Message-ID: 1058580984.55079.10.camel@jester
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-php

> How can we avoid this security risk using PHP & postgreSQL?.

Be sure to verify all input from the untrusted source is valid, and
after you do that, be sure to escape it using pg_escape_string() or
pg_escape_bytea().

In response to

Browse pgsql-php by date

  From Date Subject
Next Message Adrian Tineo 2003-07-19 08:53:04 Re: postgreSQL web form; Security
Previous Message Ângelo Marcos Rigo 2003-07-18 14:34:05 Paginating results