vividona Posted July 15, 2010 Share Posted July 15, 2010 Hi How can I prevent [running sql queries] in my script forms so that no one can make injection. I mean [sELECT - DELETE - UPDAT etc]. Link to comment https://forums.phpfreaks.com/topic/207806-how-can-i-prevent-running-sql-queries/ Share on other sites More sharing options...
Mchl Posted July 15, 2010 Share Posted July 15, 2010 Prevent against injections, not against running queries. You can: Escape your data. Use prepared statements. Give only necessary database access privileges to your application Move all your queries to stored procedures and allow your application to run only specified set of these procedures Link to comment https://forums.phpfreaks.com/topic/207806-how-can-i-prevent-running-sql-queries/#findComment-1086321 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.