motorollin wrote:
Speelgoedmannetje wrote:
Also, make sure no SQL injection is possible.
Hmm, just done some reading about this. Sounds scary! Can I guard against this by processing all user input with addslashes()?
--
moto
Well, as I stated earlier, if handle all the database stuff server side behind a protocol, and make sure the user input is restricted, there's not much that can go wrong.
Remember, the aim of programming is to
reduce the capabilities of the computer.