Re: PHP for preventing SQL injections?

[weigelt () metux de]

On Tue, Sep 16, 2003 at 04:48:21PM -0400, Lefevre, Steven wrote:
> Hey folks -
>
> Does anyone know of a regexp for checking SQL strings for injection
> attempts?
Hmm, you should only let through those characters which are allowed.

i.e. /[a-zA-Z0-9\.\_\-\/:\;\,\!\"\$\%\&\(\)\{\}\?\@\^\#\\\+\*\~\>\<\|\s\t]+/
should be enough ... perhaps i've missed some also needed chars. 

cu
-- 
---------------------------------------------------------------------
 Enrico Weigelt    ==   metux IT services

 phone:     +49 36207 519931         www:       http://www.metux.de/     
 fax:       +49 36207 519932         email:     contact () metux de
 cellphone: +49 174 7066481          
---------------------------------------------------------------------
 Diese Mail wurde mit UUCP versandt.      http://www.metux.de/uucp/