When you say "sanitise" it, what does that actually mean?
When accepting data, any data at all, it should be sanitised before making its way to your database.
What does this mean? Well, for one, you’re going to inspect the data and make sure that it doesn’t contain any malicious code such as ill-intentioned javascript. Another is to prepare the data so that when it gets added to your insert/update SQL it doesn’t break the SQL (or do other nasty actions). Otherwise know as a SQL injection attack.
05-30-2009, 08:51 PM
Threaded Mode