SQL injecting

How can it happen, i dont want my site to be hacked :P +rep if somone explains or gives me a link.

http://www.unixwiz.net/techtips/sql-injection.html
http://www.securiteam.com/securityre...DP0N1P76E.html

Those are two great articles.

Thanks :)

K opening this again, ive made a function to remove bad characters from my string, I've got these on the list so far, is there any I've mised;

& - gets replaced with &
OR - with O<i></i>R
' - removed
" - &quot;
> - &lt;
< - $gt;

Would that be enough to stop injecting?

Quote:

---

Originally Posted by Tom743

K opening this again, ive made a function to remove bad characters from my string, I've got these on the list so far, is there any I've mised;

& - gets replaced with &amp;
OR - with O<i></i>R
' - removed
" - &quot;
> - &lt;
< - $gt;

Would that be enough to stop injecting?

---

htmlentities( $string, ENT_QUOTES ); will be fine. (as in, just that)