'secure' contact form

[ultrus]

Hello,

I've created several contact forms. However I want to make BETTER ones. What steps should I take to prevent SQL, and other php related attacks? Any examples available?

 

I appreciate the feedback.

[RussellReal]

if its a contact form you should never hafta worry about SQL injection or anything else, just send the email to yourself with the contact form's data/information, and let your email service provider handle the security, BUT if you are still concerned..

 

Just remember, mysql_real_escape_string before you insert any STRINGs into a mysql query..

 

any values you EXPECT to be a number, you can be SURE its a number by simply data typing it example:

$numValue = (int) $_POST['someNumberValue'];