php - How can I protect my site from SQL injection? -
this question has answer here:
- php protection of parameters 3 answers
- how can prevent sql injection in php? 28 answers
as can see have error in site:

and alrady put @:
$q = @$_get['q'];
if $q used in sql query need handle properly.
but display in-page echo or equivalent use htmlentities($q)1 part.
Comments
Post a Comment