Community Learn Tools Library Leisure
search
English
Home > Backend Development > PHP Tutorial > body text

新手入门,关于后台处理提交的数据解决办法

WBOY
Release： 2016-06-13 12:13:17
Original
962 people have browsed it

新手入门,关于后台处理提交的数据
除了屏蔽错误提示,检查是否包含sql关键字还有什么需要做的?

希望可以给具体一点的做法,万谢!
------解决思路----------------------
使用pdo的参数绑定可以杜绝sql注入
上传的文件要检查类型和大小，文件夹一定是没有执行权限
另外就是注意用户提交的html标签不要直接输出到页面，用htmlspecialchars先转换一下

Related labels：
html htmlspecialchars pdo sql
source：php.cn
Previous article：IOC容器是什么？用途是什么？facade是什么？用处是什么 Next article：一个0开头的数据循环累加的有关问题
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Latest Articles by Author
Latest Issues
function_exists() cannot determine the custom function Function test () {return true;} if (function_exists ('test')) {echo "test is function...
From 2024-04-29 11:01:01
0
2
1852
How to display the mobile version of Google Chrome Hello teacher, how can I change Google Chrome into a mobile version?
From 2024-04-23 00:22:19
0
10
2018
The child window operates the parent window, but the output does not respond. The first two sentences are executable, but the last sentence cannot be implemented.
From 2024-04-19 15:37:47
0
1
1698
There is no output in the parent window document.onclick = function(){ window.opener.document.write('I am the output of the child ...
From 2024-04-18 23:52:34
0
1
1601
Where is the courseware about CSS mind mapping? Courseware
From 2024-04-16 10:10:18
0
0
1616
Related Topics
More>
Popular Recommendations
Popular Tutorials
More>
Related Tutorials
Popular Recommendations
Latest courses
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template