Store data in DB as is, or escaped?

Posted by Yegor on Stack Overflow See other posts from Stack Overflow or by Yegor
Published on 2010-04-03T22:22:02Z Indexed on 2010/04/03 22:23 UTC
Read the original article Hit count: 267

Filed under:

php

|

escape

Whats a better way to store textual data, such as comments, user profile fields that require them to type something in, etc? Store the escaped data right away (using htmlspecialchars in php for example), or put it thru the same function before its echoed out?

© Stack Overflow or respective owner

Related posts about php

Magento, NGINX, PHP-FPM, APC, MEMCACHED, 16gb Ram CentOS, Spiking PHP-FPM to 100% CPU

as seen on Server Fault - Search for 'Server Fault'
I have been trying to resolve my issue of spiking cpu caused by php-fpm processes. I've reduced the php-fpm config settings to: pm = ondemand pm.max_children = 12 pm.start_servers = 2 pm.min_spare_servers = 2 pm.max_spare_servers = 10 pm.max_requests = 500 php_admin_value[memory_limit] = 128M Problem… >>> More
PHP Pear Installation on CentOS

as seen on Server Fault - Search for 'Server Fault'
[root@ip ~]# yum install php-pear* Reducing CentOS-5 Testing to included packages only Finished Setting up Install Process Package 1:php-pear-1.8.1-2.el5.centos.noarch already installed and latest versio … >>> More
Apache configurations for php "AddType text/html php" or "AddType application/x-httpd-php php .php"

as seen on Server Fault - Search for 'Server Fault'
I am taking over an application server and discover that it contain the following settings: AddType text/html php Although it works, but my understanding is that it should set as following: AddType application/x-httpd-php php .php What are the key differences between the two settings?… >>> More
mod_rewrite settings causes server to throw HTTP 500 errors instead of 404

as seen on Server Fault - Search for 'Server Fault'
Hello. I have a server with VBulletin forum (working under Apache 2.2, CentOS). The default settings for it in .htaccess are as follows: RewriteEngine on RewriteCond %{HTTP_HOST} ^gsmforum\.ru RewriteRule (.*) http://www.gsmforum.ru/$1 [R=301,L] # If you are having problems or are using VirtualDocumentRoot… >>> More
Problems installing Memcache (PECL extension)

as seen on Server Fault - Search for 'Server Fault'
I have installed memcached fine, and now I will need to install PECL extension memcache. Im running RedHat x86_64 es5. The installation gives me this: downloading memcache-2.2.6.tgz ... Starting to download memcache-2.2.6.tgz (35,957 bytes) ..........done: 35,957 bytes 11 source files, building running:… >>> More

Related posts about escape

What's the difference between URI.escape and CGI::escape

as seen on Stack Overflow - Search for 'Stack Overflow'
And which one should I use? >>> More
to escape or not to escape: well formed XHTML with diacritics

as seen on Stack Overflow - Search for 'Stack Overflow'
Say that you have a XHTML document in English but it has accented characters (e.g. meta name="author" content="José"). Let's say you have no control over the HTTP headers. Should the characters be replaced for their corresponding named entities (e.g. á, etc)? Should the doc type and… >>> More
Excel Conditional Formatting With Question Mark

as seen on Super User - Search for 'Super User'
I would like to use a conditional formatting rule in an excel file that would color any box with a question mark in it red. It seems that Excel is using a question mark as a wild card and will turn all cells with at least one character in them red. How can i escape the question mark? These don't… >>> More
mysqldump on console, how to escape password?

as seen on Super User - Search for 'Super User'
Hello, I am running a mysqldump via a bash script and have encountered a problem with a password that contains special characters. How do I escape the password? mysqldump -hlocalhost -uUSERNAME -pPA$$W0RD DATABASE | gzip /home/USERNAME/backups-mysql/BACKUP.gz >>> More
Escaping a password using mysqldump console

as seen on Super User - Search for 'Super User'
I am running a mysqldump via a bash script and have encountered a problem with a password that contains special characters. mysqldump -hlocalhost -uUSERNAME -pPA$$W0RD DATABASE | gzip > /home/USERNAME/backups-mysql/BACKUP.gz How do I escape the password? >>> More