Process Special HTML Characters and Prevent SQL Injections Easily in RPG!

[T.Snyder]

** This thread discusses the article: Process Special HTML Characters and Prevent SQL Injections Easily in RPG! **
** This thread discusses the Content article: Process Special HTML Characters and Prevent SQL Injections Easily in RPG!0

[RingerSoftware]

Re:Process Special HTML Characters and Prevent SQL Injections Easily in RPG!

** This thread discusses the article: Process Special HTML Characters and Prevent SQL Injections Easily in RPG! **
Hi Tom, Your PHP example htmlspecialchars("Tom's Computer Shack"); is not encoding the ' which is the purpose of the example. Try htmlspecialchars("Tom's Computer Shack", ENT_QUOTES); . I know you say that flags can be used, but the example needs the flag to work correctly. I prefer htmlentities() since it's more complete, like encodeURIComponent() is for javascript. And another technique to thwart SQL injection is to use prepared SQL statements, like with ? parm markers in RPG. And the break can also be (space in there) to be XHTML compliant. I'm not trying to be critical. You took the time to write the article, not me. Thanks. Chris Ringer