LincolnN9neN9ne (2013-05-25 16:24:18)

---

Interesting. o3o

---

(Capt.)Orb (2013-06-10 14:38:42)

---

Well I already knew this.

Also use the code given in this topic for page that grabs data like

Site.com/forums/view.php?id=1 or something.

---

klubadmin (2013-06-27 03:20:58)

---

1) As pointed out before, simply md5()-ing a password isn't REALLY secure, but it should suffice for this general community.

2) If I'm not mistaken, that code actually can still be injected into (though it's more difficult). I might be wrong about this though.

3) This is the most important one:

People should stop using mySQL to connect to their databases entirely and rather use PDO instead. Why? Because PDO cannot be injected into. You don't even have to worry about this.

Not only that, but it's faster than mySQL (more scalable) and just about as easy. Seriously, just do a bit of googling and switch to PDO before you get caught up in your coding (if you already have an entire site made with mySQL, it's still ok, just try to avoid it in the future).

Of course, there are more reasons to use PDO over mySQL, but those are some of the main ones.

---

klubadmin (2013-06-28 20:21:49)

---

@marioermando

Not sure if serious or trolling.

---

(Capt.)Orb (2013-06-30 10:51:18)

---

I made a topic about this ages ago.

---

klubadmin (2013-07-02 02:48:04)

---

@marioermando PDO is simple if not simpler. It was made to be easy.

You're probably just not used to it, but once you do, there's no reason to ever use something else.

---

angelrulez7 (2013-08-07 06:22:04)

---

LOL ^

This post has been edited one or more times, the last time was:
2013-08-07 13:22:23

---