Forum Moderators: coopster

Message Too Old, No Replies

PHP & Mysql injection in phplist

         

ktsirig

6:05 pm on Nov 7, 2006 (gmt 0)

10+ Year Member



Hello all,
I want to secure a page which uses the script of "phplist". Basically this script stores username, name, surname, email etc of users in order for the company to send newsletters to their clients.
Except from stripping slashes,backslashes etc or special characters, are there any other ways to prevent the data stored in the db from somenone that wants to "lay their hands" on them?

Thank you!

barns101

6:20 pm on Nov 7, 2006 (gmt 0)

10+ Year Member



Use mysql_real_escape_string [php.net] and check out some form validation tutorials.

eelixduppy

8:06 pm on Nov 7, 2006 (gmt 0)



Related thread: SQL Injection Vulnerability [webmasterworld.com] ;)