Anti-SQL Injection





ranking Sort Sort   |   date Sort Sort   |   member Sort Sort
Syndication

« Previous 1 2  ...  9 10 11 12 13 14 15 16 17 Next »
16
Date Submitted Tue. Jun. 13th, 2006 12:24 AM
Revision 1
Coder mattrmiller
Tags "Phone Number" | Format | PHP
Comments 3 comments
Format a phone number with php.
13
Date Submitted Fri. Jun. 23rd, 2006 10:19 AM
Revision 1
Coder mattrmiller
Tags Authentication | Email | PHP | SMTP
Comments 0 comments
I needed to send an email through an authenticated SMTP server. I found the snippet on the PHP website to do the trick.
13
Date Submitted Tue. Jul. 11th, 2006 10:34 PM
Revision 1
Coder mattrmiller
Tags Generator | Number | PHP | Random | String
Comments 2 comments
Generate a random number or string in PHP.
15
Date Submitted Sun. Aug. 27th, 2006 10:44 AM
Revision 1
Helper mceppi
Tags filesize | PHP
Comments 2 comments
A small recursive php function to determine the size of a directory by adding all it's contents together and returning them as an integer.
-7
Date Submitted Fri. Feb. 17th, 2006 4:52 AM
Revision 3
Helper mercutio
Tags mysql
Comments 0 comments
I use this method for keeping my sql templates away from my code.

You can extend upon the idea, as I have done in the past, by placing SQL handing classes between your scripts and the template library.

Things to note here:

The lesser userd heredoc string method. The reason this is used is to keep the SQL clear and well laid out, and not as messy as using quotes.

vsprintf() is a very handy function if you don't want to hard code the number of parameters to interpolate your string with.

The use of sprintf templates offers you additional security. For example, only allowing numbers to be placed where a %d falls. This, of course, shouldn't be the only security on user supplied variables, but comes in extra handy for debugging purposes.

Regarding the TODO in there, it would take a check of the number of % placeholders there are in the template. One caveat is remembering to remove the count of %%'s that appear (the literal percentage).
7
Date Submitted Mon. Nov. 28th, 2005 4:35 PM
Revision 1
Beginner Michael
Tags Extract | PHP
Comments 3 comments
Using the extract() Functio
9
Date Submitted Wed. Feb. 28th, 2007 3:41 PM
Revision 1
Helper mjlintz
Tags PHP
Comments 1 comments
Mass email list of email addresses from a mysql db table.
6
Date Submitted Thu. Mar. 1st, 2007 3:45 PM
Revision 1
Helper mjlintz
Tags PHP
Comments 1 comments
Pull items from a mysql db table and display in the following format-
item1, item2, item3

In the example code, the query will return all items that have the color "red" specified in the db.
14
Date Submitted Thu. Mar. 1st, 2007 3:48 PM
Revision 1
Helper mjlintz
Tags PHP
Comments 5 comments
Display contents of a folder, see comments in code.
7
Date Submitted Thu. Mar. 1st, 2007 3:53 PM
Revision 1
Helper mjlintz
Tags PHP
Comments 0 comments
Generate multi select box from data in db, then when submitted, each selection is written to a db table as it's own record, each tied together by a common record id.
« Previous 1 2  ...  9 10 11 12 13 14 15 16 17 Next »