Sql Injection And Php Question?

Author: admin  //  Category: SQl Injection

Hello,
My website has a simple php comment feature, that allows the user to enter comments on videos, which are then added to a database. To protect against SQL injection, I’ve used the standard ysql_real_escape_string and stripslashes methods. However, this means that whenever a use enters a comment with ‘ or “, etc, the comment is not entered.
How can I protect against SQL injection, but still allow my users to comment with normal punctuation?
Thanks
Legs

Tags: ,

One Response to “Sql Injection And Php Question?”

  1. b-i-n-g- Says:

    http://www.programmerstalk.net/thread722…http://www.metatitan.com/php/16/protecti...

Leave a Reply