HTML allowed, preventing SQL Injection

[Jake]

On a new game engine i am developing, i want HTML to be enabled within a profile signature (easy enough), but will this not lead to easy SQL injection attacks? How can i prevent against this? Or is it not a problem?

[oxidati0n]

Re: HTML allowed, preventing SQL Injection

Well basicly

add this in some of your codes

 

foreach($_REQUEST as $k=>$v)
{
$_REQUEST[$k]=mysql_real_escape_string($v);
}

 

That should do it.. :lol: