Hi guys . How to protect yourself from SQL Injection?
Specially Inputs???
I know i can google it but i think experiences are more useful.
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (4)
Prepared statements has pretty much solved this problem
Preparing and then binding parameters? Yes and also you can use addslashes method in PHP it gives a backslash before characters and this protects you from SQL Injection ...
addslashes don't prevent SQL injection.
php.net/manual/en/function.addslas...
The addslashes() is sometimes incorrectly used to try to prevent SQL Injection. Instead, database-specific escaping functions and/or prepared statements should be used.
Why is SQL injection still a thing?
Zohar Peled ・ Jul 16 ・ 1 min read