Lambneck Posted February 25, 2009 Share Posted February 25, 2009 I dont know much about the subject and I was wondering, does using mysql_real_escape_string() in your processing script protect against form hijacking? Link to comment https://forums.phpfreaks.com/topic/146829-form-hijacking/ Share on other sites More sharing options...
trq Posted February 25, 2009 Share Posted February 25, 2009 mysql_real_escape_string will protect you from sql injections, not form hijacking. the best hting you can do to prevent form hijacking is to validate your data looks like it should. Link to comment https://forums.phpfreaks.com/topic/146829-form-hijacking/#findComment-770856 Share on other sites More sharing options...
Lambneck Posted February 25, 2009 Author Share Posted February 25, 2009 is there a way to validate it while still allowing html submissions? Also I read that the most important thing you could do to prevent hijacking is to "...check submitted characters and remove line breaks from data that is used in email headers." Is there a way to do that using php while still allowing html submissions? Link to comment https://forums.phpfreaks.com/topic/146829-form-hijacking/#findComment-770860 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.