PHP Filters : mmmm….security!

Comments

1. Denis de Bernardy (7 comments.) says:

   6/30/2005 at 7:20 pm

   sanitize_sql_string is somewhat over-paranoid. unless I am mistaking, it basically removes any occurrence of ; in sql strings. not exactly what you want in a publishing tool.
2. Mark (118 comments.) says:

   6/30/2005 at 9:43 pm

   Maybe for a blogging tool, but for any app of finance, it is just being safe.
3. Denis de Bernardy (7 comments.) says:

   7/1/2005 at 7:33 pm

   even for a finance app, really. i’ve worked with firms in the finance sector in the past. in practice, they’re hardly less insecure as another firm. and you basically cannot use a security measure such as this: it will likely break a market data, order routing and clearing application who relies on it.