Mysql injection

Question

Possible Duplicate:
Are mysql_real_escape_string() and mysql_escape_string() sufficient for app security?

So how do you protect against it now magic qoutes is deprecated.

is

mysql_real_escape_string();

enough?

score 1 · Answer 1 · answered Apr 02 '11 at 01:22

1

answered Apr 02 '11 at 01:22

bensiu

score 0 · Answer 2 · answered Apr 02 '11 at 01:20

0

It appears thats all you would need:

This function must always (with few exceptions) be used to make data safe before sending a query to MySQL.

answered Apr 02 '11 at 01:20

Daniel A. White

2 Answers2