Comments on: How to Sanitize User Input in PHP? /2010/04/20/how-to-sanitize-user-input-in-php/ on web development Fri, 26 Oct 2018 21:40:18 +0000 hourly 1 https://wordpress.org/?v=5.0.3 By: Wayne May /2010/04/20/how-to-sanitize-user-input-in-php/comment-page-1/#comment-12900 Wed, 21 Apr 2010 16:49:35 +0000 /?p=1461#comment-12900 I much prefer htmlentities over htmlspecialchars. Also, you titled this wrong, because other than converting a few tags, this does not sanatize your data much. As @seanJA pointed out, you are still open to SQL injection attacts too.

This is by no means anything that I would use to sanatize user input.

]]> By: Stoimen /2010/04/20/how-to-sanitize-user-input-in-php/comment-page-1/#comment-12898 Wed, 21 Apr 2010 06:43:35 +0000 /?p=1461#comment-12898 @SeanJA – here I don’t cover the database escaping, but only HTML markup. However this doesn’t kill my database!

]]> By: SeanJA /2010/04/20/how-to-sanitize-user-input-in-php/comment-page-1/#comment-12896 Wed, 21 Apr 2010 02:39:07 +0000 /?p=1461#comment-12896 How does this sanitze user input? They can still kill your database by entering ‘; DROP TABLE users;

]]>