Anti-SQL Injection. 99% Safe! (recommended)

[regenx]

Hi, with this php function you can stop 99% from SQL injections on your php register page.

From today you are safe! Trust me. I recommend you to use this function...

function madSafety($string) {

$string = stripslashes($string);

$string = strip_tags($string);

$string = mysql_real_escape_string($string);

return $string;

}

[wazy]

strips the entered query to prevent injection

[regenx]

Yes, this function is perfect! No programs or php/mysql programmer can not pass such a function ;)

[Sanchoz]

how to install it?

[regenx]

<?php

function madSafety($string) {

$string = stripslashes($string);

$string = strip_tags($string);

$string = mysql_real_escape_string($string);

return $string;

}

Your php register code here....

.....

Your end code .....

?>

Something like that ....

Good Luck & Have Fun!

[Fabian]

The best method are prepared statements

[regenx]

Wh

The best method are prepared statements

What do you mean with prepared statements?

btw...

-- this is wrong way

$string = mysql_real_escape_string($string);

$string = stripslashes($string);

$string = strip_tags($string);

-- this is safe way

$string = stripslashes($string); // Keep your usernames clean

$string = strip_tags($string); // Kill all tags like html tags, etc..

$string = mysql_real_escape_string($string); // Anti-injection

[Fabian]

http://php.net/manual/de/pdo.prepared-statements.php