Sql injection

Submitted by damer on Tue, 2006-10-24 19:55 in Price Tapestry

I was just wondering if this script protected against searches containing sql injection.

Thanks.

Hi, Everywhere an SQL

Submitted by support on Wed, 2006-10-25 06:21

Hi,

Everywhere an SQL statement is constructed from form input the mysql_escape_string() function is used (within the database_safe() function) to protect against not only SQL injection but also any form input that could possibly break the SQL.

Cheers,
David.