strip slashes/ msql real escape function

[runnerjp]

is there like a function i could make that would atuomaticly strip slashes ect on any post or get made?

[trq]

<?php

  $_POST = array_map('stripslashes', $_POST);
  $_GET = array_map('stripslashes', $_GET);

?>

[Mchl]

  $_REQUEST = array_map('stripslashes', $_REQUEST);

 

$_REQUEST is $_POST and $_GET combined.

[runnerjp]

cheers guys... what other things then stripslashes would you recomend using to prevent sql injections...

[DeanWhitehouse]

mysql_real_escape_string();?

[trq]

  $_REQUEST = array_map('stripslashes', $_REQUEST);

 

$_REQUEST is $_POST and $_GET combined.

 

That will however have no affect on the $_POST or $_GET arrays.

[trq]

cheers guys... what other things then stripslashes would you recomend using to prevent sql injections...

 

Stripslashes will not prevent sql injection. Your data needs to be properly escaped and personally, I find it better to do this on a case by case basis rather than in some catch all.

[DeanWhitehouse]

Unless he is using $_REQUEST instead of using $_POST and $_GET, but it is unadvised as it is a security risk i believe.

[Mchl]

Unless he is using $_REQUEST instead of using $_POST and $_GET, but it is unadvised as it is a security risk i believe.

 

That will however have no affect on the $_POST or $_GET arrays.

 

Both right.

[runnerjp]

so rather then add a function to do it just do it all manually will be safer!