[woostar]

Thanks Disasterpiece

I've while waiting for a reply been searching about.

Being that cookies can be manipulated (regardless of what I originally set them to) I want to make sure I'm not open to any MySQL injections.

If I'm reading things right, the following should work?

PHP Code:

$vbulletin->input->clean_gpc('c', COOKIE_PREFIX . 'userVar', TYPE_STR); 
$userdata->set('userVar', $vbulletin->GPC[COOKIE_PREFIX . 'userVar']); 


Right?

--------------- Added [DATE]1305554055[/DATE] at [TIME]1305554055[/TIME] ---------------

Or maybe:

PHP Code:

$userVar = $db->escape_string(trim($userVar));
$userdata->set('userVar', $userVar); 


?