sequalit Posted April 2, 2008 Share Posted April 2, 2008 Is this secure? Technically anything other than letters and numbers should throw it off right? if(!ctype_alnum($_POST['username'])){ die('hey a hacker!'); }else{ $result = mysql_query(sprintf("SELECT * FROM users WHERE username='%s'", $_POST['username']) } Link to comment https://forums.phpfreaks.com/topic/99143-is-this-secure/ Share on other sites More sharing options...
lordfrikk Posted April 2, 2008 Share Posted April 2, 2008 Yes, I think it's okay. Link to comment https://forums.phpfreaks.com/topic/99143-is-this-secure/#findComment-507256 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.