[Owasp-delhi] Need Code for sanitizing inputs in PHP

[Abhishek Kumar]

Hi list,

I do have an idea about Regular expressions and its usages in preventing
XSS and SQL injection.

but the thing is, I want a function which is already written in a
compact manner
so that it tackles all XSS and SQL injection problems.

As a newbie perhaps I would miss some conditions/"malicious strings".

regards
abhi

On Fri, Jul 31, 2009 at 10:58 PM, Gunwant Singh<gunwant.s at gmail.com> wrote:
> Do you have any idea on 'Regular Expressions'?
>
> On Wed, Jul 29, 2009 at 8:13 PM, Abhishek Kumar <abhishek.luck at gmail.com>
> wrote:
>>
>> hi list,
>> I am looking for code for sanitizing each and every input for SQL
>> injection
>> and XSS in PHP
>>
>> I need a function say sanitize(<input>), where <input> would be a
>> value which user is supplying in
>> the web page.
>>
>> this sanitize function should return the sanitized value after
>> removing all possible sql injection
>> and xss strings.
>>
>>
>> another way could be, sanitize(input) should return true (if no
>> malicious string found) or false (if some malicious string is found)
>>
>> any help is appreciated.
>>
>> regards
>> abhi
>> _______________________________________________
>> Owasp-delhi mailing list
>> Owasp-delhi at lists.owasp.org
>> https://lists.owasp.org/mailman/listinfo/owasp-delhi
>
>
>
> --
> Gunwant Singh
>
>