Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations biv343 on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
-
ereg format to prevent SQL injection
Wait, I am using PHP v3 and I can't run this function. If magic quotes are turned on, do I even need to do this. Or should I just use the strip_slashes functioN? -
-
ereg format to prevent SQL injection
I am trying to run the following function to prevent sql injection in the body of a forum message: <?php ereg((SELECT\s[\w\*\)\(\,\s]+\sFROM\s[\w]+)| (UPDATE\s[\w]+\sSET\s[\w\,\'\=]+)| (INSERT\sINTO\s[\d\w]+[\s\w\d\)\(\,]*\sVALUES\s\([\d\w\'\,\)]+)| (DELETE\sFROM\s[\d\w\'\=]+), "SELECT * FROM...
