True or False?

Dreamweaver takes neccessary SQL Injection precautions.

[inveni0]

I noticed that, when setting up a query with Dreamweaver, it creates an addslashes statement. Is it true that the standard Dreamweaver queries are already well protected from SQL injection? (I know that you should still escape the strings.)

[henry0]

First read about: get_magic_quotes_gpc [us2.php.net]

then read about: stripslashes [us2.php.net]

and last (perhaps) read about: mysql_real_escape_string [us3.php.net]

so number one step is to know if in your php.ini
magic quotes are ON or OFF

if yes: stripslahes

if no: mysql_real_escape_string

the rest is within the links.