Quote:
Originally Posted by Dismounted
"SQL injection protection" shouldn't really be an afterthought - it should already be part of your habits. However, the "Creating Secure Mods" article will get you started.
|
im a newb
i now use
'Rdesc' => TYPE_NOHTML,
when getting data from user
and when running query i use
WHERE RUID = '" . $db->escape_string($vbulletin->GPC['RUID']) . "'"