https://www.icyphoenix.com/viewtopic.php?f=17&t=9350&p=59911#p59911
-----------------------------------
mort
Sun 23 Nov, 2014 13:28

Re: You Do Not Sanitize Data In $_GET
-----------------------------------
Thanks fella,

Because you both convinced me that what I've been doing in the past is just following a bad example and working hard to keep it fudged and patched to get an outcome.

Anyway, I've sorted out all the front end and there's no script or html errors or warnings.  :mrgreen: 

It's also a LOT easier too to do it the right way the first time.

Here's my new "sanitise" function that I didn't want to overkill!  :lol: 

[code linenumbers=false]Do a general clean up of POST - GET can look after itself when it's called on to do something. :)

function sanitise($val){

	$val = trim($val);

	return mysql_real_escape_string($val);
}[/code]

Tomorrow the back end, and then a few more questions here and at the devshed...

[b][size=20]BOOM![/size][/b]  :twisted:


