PHP reg globals q
PHP reg globals q
Out of context: Reply #3
- Started
- Last post
- 3 Responses
- enobrev0
also, later version of PHP have magic quotes set to on (smack me if im wrong)
That basically escapes all $_Get and $_POST vars which helps a great deal with any sql injection issues.
Of course, as mono said, you should be validating nonetheless.