bobby-tables
bobby-tables copied to clipboard
Why mysql_real_escape_string is not enough.
http://johnroach.info/2011/02/17/why-mysql_real_escape_string-isnt-enough-to-stop-sql-injection-attacks/
or, in sort: mysql_real_escape_string is only for strings. not numbers.