I'm using PHP's odbc_ functions to access an Access database, and I'm concerned about security. Do you folks have any recommendations on the best ways to sanitize my SQL queries?
I've read plenty about what characters I should strip from SQL queries that use user input, namely " , / \ * & ( ) $ % ^ @ ~ ´ ? Does PHP require anything more? -- Jeff S. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
