Re: securing web form interaction

[prev] [thread] [next] [Date index for 2005/02/15]

From: Malcolm J Harwood
Subject: Re: securing web form interaction
Date: 21:19 on 15 Feb 2005

On Tuesday 15 February 2005 2:11 pm, Adam Prime x443 wrote:

>> > $dbh->quote() everything you can.

At least some of the DBD's quote numbers, even when such should not be quoted. 
So "quote() everying" doesn't always work.

>> Or make it easy on yourself and just use placeholders.
> that too, assuming that your DBD supports them.

Which Sybase/freetds does not. (So you're somewhat out of luck if you have to 
talk to an MSSQL server unless you can go the ODBC route).

(message missing)

securing web form interaction
Jonathan Vanasco 18:02 on 15 Feb 2005

Re: securing web form interaction
ben syverson 18:36 on 15 Feb 2005

Re: securing web form interaction
Arshavir Grigorian 14:41 on 16 Feb 2005

Apache::Request equivalent of CGI::Capture?
David Naughton 21:48 on 16 Feb 2005

Re: Apache::Request equivalent of CGI::Capture?
Adam Kennedy 01:52 on 17 Feb 2005

Re: Apache::Request equivalent of CGI::Capture?
Joe Schaefer 02:22 on 17 Feb 2005

Re: securing web form interaction
Sean Davis 18:40 on 15 Feb 2005

RE: securing web form interaction
Adam Prime x443 19:07 on 15 Feb 2005

Re: securing web form interaction
Ian Joyce 19:09 on 15 Feb 2005

Re: securing web form interaction
Octavian Rasnita 19:19 on 15 Feb 2005

Re: securing web form interaction
Perrin Harkins 20:24 on 15 Feb 2005

RE: securing web form interaction
Adam Prime x443 19:11 on 15 Feb 2005

Re: securing web form interaction
Malcolm J Harwood 21:19 on 15 Feb 2005

Re: securing web form interaction
Octavian Rasnita 19:20 on 15 Feb 2005

Re: securing web form interaction
ben syverson 20:33 on 15 Feb 2005

Re: securing web form interaction
Octavian Rasnita 08:10 on 16 Feb 2005

RE: securing web form interaction
Adam Prime x443 21:13 on 15 Feb 2005

Re: Apache::Request equivalent of CGI::Capture?
Stas Bekman 03:40 on 17 Feb 2005

Re: Apache::Request equivalent of CGI::Capture?
William McKee 14:49 on 17 Feb 2005