Quick question on Security (injection Attack) - preCharge Forums
It shows that you are unregistered. Please register with us by clicking Here
preCharge Forums


Nav Green LeftNav Right
preCharge Forums > Website Design & Development > Programming > PHP » Quick question on Security (injection Attack)


Reply
Tcat Right
 
LinkBack Thread Tools Display Modes Tcat Right
Old 07-13-2006   #1 (permalink)
natalie
Junior Member
 
Join Date: Jul 2006
Age: 38
Posts: 9
Default Quick question on Security (injection Attack)

I would like to insert text into my database so that when the database is queried the text is retrieved just like the way into looks in the word document. Currently when i put the text comes out all squashed up without paragraph, tags or indents.

this is the code i am using at present

If (!empty($_POST['resume'])){
$re = escape_data($_POST['resume']);
} else {
$re = FALSE;
echo '<p><font color="red" size="+1">Please Include Your CV/Resume!</font></p>';

require('footer.php');
exit();
}


and another thing
this text completely messes up my php generated page when it is retrieved why is that so

The SELECT ... INTO OUTFILE 'file_name' form of SELECT writes the selected rows to a file. The file is created on the server host, so you must have the FILE privilege to use this syntax. file_name cannot be an existing file, which among other things prevents files such as /etc/passwd and database tables from being destroyed. As of MySQL 5.0.19, the character_set_filesystem system variable controls the interpretation of the filename.
The SELECT ... INTO OUTFILE statement is intended primarily to let you very quickly dump a table to a text file on the server machine. If you want to create the resulting file on some client host other than the server host, you cannot use SELECT ... INTO OUTFILE. In that case, you should instead use a command such as mysql -e "SELECT ..." > file_name to generate the file on the client host.
SELECT ... INTO OUTFILE is the complement of LOAD DATA INFILE; the syntax for the export_options part of the statement consists of the same FIELDS and LINES clauses that are used with the LOAD DATA INFILE statement. See Section 13.2.5, “LOAD DATA INFILE Syntax”.
Thanks
Nalalie
natalie is offline   Reply With Quote


Old 07-30-2006   #2 (permalink)
abalfazl
Junior Member
 
Join Date: Jul 2006
Age: 28
Posts: 11
Default Re: Quick question on Security (injection Attack)

Hello my firend

http://www.php.net/manual/en/functio...ape-string.php

http://www.sitepoint.com/article/php-security-blunders

GOOD LUCK!
abalfazl is offline   Reply With Quote

Reply



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads
Thread Thread Starter Forum Replies Last Post
Quick question about indexing kevin Search Engine Optimization 6 02-25-2008 06:38 AM
Vector Attempt Attack Archlord Graphics & Multimedia 17 09-11-2005 01:07 AM
Grundge Attempt Attack Archlord Graphics & Multimedia 16 09-09-2005 04:43 PM


footer left
All times are GMT. The time now is 09:53 PM.

DISCLAIMER: preCharge Risk Management is not responsible for any opinions, advice or comments expressed on the preCharge Community Forums.
preCharge® is a registered trademark of preCharge Risk Management | chargeback protection | Merchant Account Blog

Powered by vBulletin
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 RC6

Credit Check | Free Advertising | Car Loan | Hotel Santiago de Compostela | Tutorial eBook PDF Download

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49