3 ms·
Even if it's not SQL oriented, it could still be to mitigate some kind of injection attack. This is an interesting question; I hope someone with more specific
by pigscantfly 13y ago
Even if it's not SQL oriented, it could still be to mitigate some kind of injection attack. This is an interesting question; I hope someone with more specific knowledge takes the time to answer it.
- stevelosh 13y agolike foo.com'onclick="alert('hi');" But yeah the right way to do this is to use a well-tested urlencoding library, not to strip out dangerous-looking characters.