I am using mongoDB currently, and I am wondering what measures we should take to ensure that any data that could cause problems isn’t stored. I believe that normal PHP functions like mysql_escape_string isn’t going to help here…
Is there SQL injections for noSQL databases and especially mongoDB?
If so, what can we do to protect us from them?
See MongoDB’s documentation:
There are other issues to be aware of, so it’s worth giving that page a read.