Cleaning user input for use in SQL statements
Posted by Ryan Grange on January 4, 2008
Grokking Code
Code exists for a reason.
Recently Written
-
User Input
My Networks
Linux Today- The Register
Linux Today The RegisterPosted by Ryan Grange on January 4, 2008
Automated SQL Injection Attack Cripples Thousands of Web Sites « Grokking Code said
[...] Thousands of Web Sites January 8, 2008 — Ryan Grange Here we are just 4 days after my earlier post on protecting yourself from SQL injection and we have news about just such an attack affecting tens [...]
SQL Statement Cleaning Functions « Grokking Code said
[...] Statement Cleaning Functions January 8, 2008 — Ryan Grange As an addendum to my earlier post covering SQL injection, I’m posting here the function in various languages to facilitate its use by as broad a base [...]
Ryan Grange said
Be sure to also check into the use of “prepared statements” to remove some security concerns as well. (Tip of the hat to Dave for bringing those up.)
SQL Injection protection addendum « Grokking Code said
[...] on Random Records from SolrRyan Grange on SQL Statement Cleaning Fu…Ryan Grange on Cleaning user input for use in…Ryan Grange on SQL Statement [...]
SewpressWap said
[The logic puzzle sent by this user has been removed as off-topic, but not spam.]