View Single Post
Old 12-08-2007, 10:20 PM   #13 (permalink)
SOCK
The Acquainted
 
Join Date: Nov 2007
Posts: 154
Thanks: 31
SOCK is on a distinguished road
Default

Quote:
Originally Posted by Village Idiot View Post
Always single quote your variables, otherwise injection is easy (even if cleaned). For instance...
Thanks for that, it's a really good point; I forget not everyone is conscientious enough (or aware) to properly filter and validate data prior to use. Ok, if you've already validate, filtered, escaped your data, don't surround INT values in quotes.
SOCK is offline  
Reply With Quote