Re: SQL safe input? - Mailing list pgsql-novice

From Philip Hallstrom
Subject Re: SQL safe input?
Date
Msg-id 20050826135636.T20018@wolf.pjkh.com
Whole thread Raw
In response to Re: SQL safe input?  (Bruno Wolff III <bruno@wolff.to>)
Responses Prepare() Value  (<operationsengineer1@yahoo.com>)
List pgsql-novice
>  cbraden <cbraden@douglasknight.com> wrote:
>> Folks,
>>
>> I would like to know how to prevent SQL attacks on a postgreSQL server.
>>
>> I know in mySQL you can put any input going to the DB through a filter
>> which encodes anything which would be malicious into mySQL safe data.  I
>> need something similar in postgreSQL.  Specifically as a php
>> implementation if it exists.

http://us2.php.net/manual/en/function.pg-escape-string.php

-philip

pgsql-novice by date:

Previous
From: Bruno Wolff III
Date:
Subject: Re: SQL safe input?
Next
From:
Date:
Subject: Re: SQL "OR" Problem