4 ms·
Why using real_escape_string wouldn't help fixing sqli? Could you provide some examples? I know prepared statements are the way to go but proper escaping, even
by 0x4a42 11y ago
Why using real_escape_string wouldn't help fixing sqli? Could you provide some examples?
I know prepared statements are the way to go but proper escaping, even if tedious, seams to be OK for me.
- elktea 11y agoSome examples can be found here: http://stackoverflow.com/questions/5741187/sql-injection-that-gets-around-mysql-real-escape-string http://stackoverflow.com/questions/5741187/sql-injection-tha...