php Programming Glossary: sanitation
How to send mails through php script? http://stackoverflow.com/questions/1058826/how-to-send-mails-through-php-script There is encoding putting parts together validation sanitation error reporting more than bool mail ... support for authentication..
Secure files for download http://stackoverflow.com/questions/10834196/secure-files-for-download name. Of course to secure the users area I am implementing sanitation and validation on all input fields plus watching out for SQLInjections...
Events triggered by dynamically generated element are not captured by event handler http://stackoverflow.com/questions/12829963/events-triggered-by-dynamically-generated-element-are-not-captured-by-event-hand
Where to sanitize PHP $_POST[] input? http://stackoverflow.com/questions/2401706/where-to-sanitize-php-post-input this question I used to be a friend of centralizing sanitation as much as possible but extensive discussion on SO for example.. following practice In a central validation routine do no sanitation or just rough checks say for data type and size _POST category_name.. data is used in a exec call for example do the necessary sanitation directly in front of the call safe_category_name escapeshellargs..
The ultimate clean/secure function http://stackoverflow.com/questions/4223980/the-ultimate-clean-secure-function share improve this question The idea of a generic sanitation function is a broken concept. There is one right sanitation.. function is a broken concept. There is one right sanitation method for every purpose. Running them all indiscriminately.. using the data before running a database query. The right sanitation method depends on the library you use they are listed in How..
How to prevent SQL injection with dynamic tablenames? http://stackoverflow.com/questions/5811834/how-to-prevent-sql-injection-with-dynamic-tablenames just have to use a closing backtick. PDO does not provide sanitation for dynamic table names either . This is why it is good not..
binding variables to parameters in ADOdb for PHP http://stackoverflow.com/questions/76359/binding-variables-to-parameters-in-adodb-for-php SQL injection in any way I thought ADOdb also did data sanitation or escaping within the same functionality by default. Or am..
|