Timeline for Does db_query and db_insert escape input values? prevent sql injection?
Current License: CC BY-SA 3.0
4 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 28, 2012 at 21:08 | vote | accept | Kenny Wyland | ||
| Jun 28, 2012 at 21:04 | comment | added | Berdir | YES. That's the point of placeholders. | |
| Jun 28, 2012 at 20:56 | comment | added | Kenny Wyland | Even the db_query() where I'm passing it a custom SQL statement? Just want to be VERY sure. :) | |
| Jun 28, 2012 at 20:38 | history | answered | tenken | CC BY-SA 3.0 |