Simple question really, is stripslashes() enough to prevent mysql injections or do you have to go through many things like the mysql escape function and others...?

This will be used on a user registration page.

__________________

---

I recommend using one of the functions from my tutorial: TUTORIAL: MySQL Injection Attack Prevention in PHP

__________________
Jeremy Miller
Content Farmer - Optimized Automated Blog Posting

---

Yes i remembered that but this is why i ask, is there really any need for a big function, will stripslashes not do the job on its own?

__________________

---

Well, the more important thing is to remember to use mysql_real_escape_string. That's all you have to use if you aren't affected by the MySQL advisement:

I don't think of it as that much code though - to use, you only call a different function name: sql_safe(); with various parameters as needed.

__________________
Jeremy Miller
Content Farmer - Optimized Automated Blog Posting

---

Ok Thanks, I was just wondering though, how do you get the input back to how it was input? As with mysql_real_escape_string() it puts in back slashes then that value would be in the database, then when you get it out you would want it back to normal?

__________________

---

Most of the time that's done for you automatically. If not, you can then stripslashes.

__________________
Jeremy Miller
Content Farmer - Optimized Automated Blog Posting

---