Form data upload & Forum

How to have safe data & Simple free forum

[tomda]

A. I am developping an interactive website with lot of data uploaded in MySQL database.
Now, I want to know which functions should be used on data to make sure that data are safe.

A1/ Which one do you used and which ones are really important?
strtolower, addslashes, trim

A2/ Which character do you remove (HTML, slashes, ")?
A3/ What about special characters?
A4/ And about hackers using MySQL command in form entry data?

Do one of you have a good function which do all in once.

---------------------------------
Secondly, I have already a membership system with interactive picture_gallery (GD). Now, I want to start a simple forum. I am a bit tired to script all by myself (although I have learned a lot from doing everything by myself), so I am looking for a free forum - the most simple it can be, let's say that something like this one is simple enough. No Phpboard, invboard - much too big.

Any link or sticky mail will appreciated

Tomda

[barn_de]

Hi tomda,

we use addslashes() and htmlspecialchars(). whit this you should be save also regarding to your A4.

barn

[jatar_k]

for data being inserted into mysql use mysql_escape_string [ca.php.net] since that is what it is made for. Works better than addslashes.

[tomda]

Thanks for the response.

I can not understand why this small code below do not print the result. Could someone assist me?

<?
$texte = " Charle's head is big <b> for</b> \makin / jend $ <u>jde</u> ' dee \" de ";

function var_trim ($varia) {
$varia = rtrim ($varia);
$varia = ltrim ($varia);
$varia = addslashes ($varia);
$varia = strip_tags($varia); }

function var_load ($varia) {
$varia= stripslashes ($varia);
$varia = htmlspecialchars($varia); }

$texte_trim = var_trim($texte);
echo $texte_trim;
echo "<br><br> \r\n";

$texte_load = var_load ($texte);
echo $texte_load;
echo "<br><br> \r\n";
?>

Thanks

[barn_de]

you just forgot to return the value from your functions:

function var_trim ($varia) {
$varia = rtrim ($varia);
$varia = ltrim ($varia);
$varia = addslashes ($varia);
$varia = strip_tags($varia);
return $varia; }

function var_load ($varia) {
$varia= stripslashes ($varia);
$varia = htmlspecialchars($varia);
return $varia; }

barn

[tomda]

Thanks Barn.
I am not yet used with functions.
Tomda