Re: [PHP] $_POST vs $_REQUEST

[email protected] (Slack-Moehrle) Mon, 22 Feb 2010 14:02:17 -0800 (PST)

Newsgroups	php.general
Message-ID	<2061499056.308.1266876137622.JavaMail.root@indie.theindiecompanyllc.com>

John,

>>Then if you use a MySQL database you would escape the string like this
>>$tmp = mysql_real_escape_string($_REQUEST['yyy']);


>>mysql_real_escape_string() protect from SQL injection by escaping your 
>>string according to what your charset requires.

Good point, I should be doing that. But only to String, not data stored in MySQL as Int or Date, etc.

-ML