Home/ Questions/Q 8148527
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-06T14:39:48+00:00

I’m looking into wordpress plugin, and it has a form with input field like

  • 0

I’m looking into wordpress plugin, and it has a form with input field like this:

<input type="text" name="user_email" id="email1" value="'.strip_tags($_POST['user_email']).'"  class="short" tabindex="2" />

So strip_tags in value means that anything submitted through this input will be tag striped? against SQL inject?

Should not this security measure be implemented on target file of this form instead?

I’m having trouble understanding if this would be any help in securing against sql injections

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    It will be tag striped only this time (setting value to HTML input field — assuming this is done server-side when generating HTML content). You have to do same thing when accessing database with parameters.

    • 0