anonīms Posted May 11, 2008 Report Share Posted May 11, 2008 Vai pievienojot tekstu ar quote_smart pietiek vai arī vajadzētu vēl kaut ko (htmlspecial... kaut kas) Link to comment Share on other sites More sharing options...
Delfins Posted May 11, 2008 Report Share Posted May 11, 2008 Mums atkal jāzīlē, ko tu ar to tekstu darīsi? Link to comment Share on other sites More sharing options...
anonīms Posted May 11, 2008 Author Report Share Posted May 11, 2008 Tas teksts ir/būs komentārs, kurš tiks pievienots db. Link to comment Share on other sites More sharing options...
andrisp Posted May 11, 2008 Report Share Posted May 11, 2008 mysql_real_escape_string() ievadot, htmlspecialchars() izvadot. Link to comment Share on other sites More sharing options...
duplets Posted May 11, 2008 Report Share Posted May 11, 2008 Tāds quote_smart iekš php nemaz nav, tā ir paštaisītā fcija, kas nodrošina $_POST un $_GET laukus pret SQL injekcijām!!!! Link to comment Share on other sites More sharing options...
mounkuls Posted May 11, 2008 Report Share Posted May 11, 2008 Vispār jau to mēs nezinām droši. Bet pieņemsim, ka ir kādā skriptā bijis gatavs risinājums, kas to pilda. Bet tā, andrisp jau pateica ko vajag principā. Link to comment Share on other sites More sharing options...
Aleksejs Posted May 12, 2008 Report Share Posted May 12, 2008 Iesaku pie viena uzreiz palasīt par to, kad ar real escape ir par maz: The Unexpected SQL Injection - When Escaping Is Not Enough Link to comment Share on other sites More sharing options...
Recommended Posts