Chris Shiflett: Security Corner: SQL Injection
This article explains SQL injection by looking at a few example attacks and then introducing some simple and effective safeguards. By applying best practices, you can practically eliminate SQL injection from your list of security concerns.
(tags: injection sql security database)
addslashes() vs mysql_escape_string() –
Illustrates the difference between addslashes() and mysql_escape_string(), so far as what characters they handle.
(tags: mysql php injection security database)
[The Unexpected SQL Injection] Web Security Articles – Web Application Security Consortium
A good overview on validating and escaping input data before using such data in database queries.
(tags: injection sql security database)