in reply to Re: Preventing SQL injection attacks: are -T and placeholders not enough?
in thread Preventing SQL injection attacks: are -T and placeholders not enough?

If youre going to strip out apostrophes, then youd probably better also make sure that its set up so the users know they cant (or at least theyre not allowed to) use any contractions. While youre at it, dont forget to make it clear that any possessives in the users input will also be damaged.
  • Comment on Re^2: Preventing SQL injection attacks: are -T and placeholders not enough?