Checking for quotes, semicolons in user input

[sm43]

Hi,
Can anyone guide me with how to do user-input verification for semi-columns, quotes etc in php- i'm building a query out of these inputted values.

What do I replace them with?

I'm reading in posts/articles to look for these as they mess up the query (though whether strictly in a syntactical way or by compromising security-that I'm not fully sure of).

Would greatly appreciate the help!


Thanks.

Saad

 

[sleipnir214]

Insufficient data for a meaningful answer. You have not specified what database backend you are using -- I will assume MySQL.

Check out mysql_escape_string () (

http://www.php.net/manual/en/function.mysql-escape-string.php).

It will not remove potentially dangerous characters, but will instead escape them (with backslashes) so that they can be used in queries with MySQL. Want the best answers? Ask the best questions:

http://www.catb.org/~esr/faqs/smart-questions.html

TANSTAAFL!