Prevent SQL Injection

[Brandon_R]

Hello guys i wrote my script etc but now i need functions to prevent sql injection and where to add it.

 

I know of some like addslashes etc but on what variables do i add it? All that enters the database such as from a textarea or just the url like sql.php?id=1 and add the addslashes to the id from a request etc?

 

Thanks

Brandon_R

[TeNDoLLA]

Use mysql_real_escape_string on user input or even better use prepares statements (e.g mysqli or PDO).