as you can see I have an error in my site:
and I alrady put the @:
$q = @$_GET['q'];
Asked
Active
Viewed 130 times
-1
-
3Don't use warning suppression. – Jason McCreary Aug 28 '13 at 12:41
-
1Putting `@` in your code does **not** solve any issues. If you want to prevent SQL injection, escape your queries properly and/or consider using parameterized queries. See this question for [reference](http://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php). – Amal Murali Aug 28 '13 at 12:41
-
Use parameterized queries. That solves almost the entire problem. – Gordon Linoff Aug 28 '13 at 12:41
-
3See http://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php – DNac Aug 28 '13 at 12:42
-
1Use `mysqli_real_escape_string($q);` – Bora Aug 28 '13 at 12:42
-
Or see here - http://stackoverflow.com/questions/4749588/protect-against-sql-injection – Black Sheep Aug 28 '13 at 12:43
