Home/ Questions/Q 8705227
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-13T03:18:30+00:00

Possible Duplicate: Best way to prevent SQL injection in PHP? My html web form

  • 0

Possible Duplicate:
Best way to prevent SQL injection in PHP?

My html web form in the php site takes data from the client side and puts it into the mysql database. I was wondering the steps needed to sanitize the data before storing it into mysql.

Assuming this sanitization would need to be performed using PHP and then inserted into Mysql, could you please let me know what all needs to be taken care of?

As a special case, apart from general sanitization, I would want to remove all special characters, spaces, and convert all characters into their lower case before putting into the database. What are the functions that I need to look at for doing this?

I’m quite new to php.

Thanks.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    1.mysqli_real_escape_string() or mysql_real_escape_string() to escape quotes

    2.use php filter_input for other form data

    $search_html = filter_input(INPUT_GET, 'search', FILTER_SANITIZE_SPECIAL_CHARS);
$search_url = filter_input(INPUT_GET, 'search', FILTER_SANITIZE_ENCODED);

    There are other options into php manual here is link

    http://php.net/manual/en/function.filter-input.php

    http://www.php.net/manual/en/filter.filters.sanitize.php

    • 0