Problems with POST in php

[ChrisPAR]

@Herbert

You should consider using PDO (PHP Data Objects)
to prevent further attacks.

PDO with prepared statements is a way, but MySQLi functions can also be utilized for the same purpose, the choice is not relevant. A guide written by Admin exists for this topic:

How to avoid SQL injection attacks

A common mistake with new PHP developers is that they write code that’s vulnerable to SQL injection attacks. SQL injection attacks can be very dangerous to your website! It’s an easy mistake to make if you don’t know what to look out for, but one which is easy to avoid if you do. This article describes what an SQL Injection Attack is, and what you can do to protect your website from it. This article uses the MySQLi library as an example, but the same vulnerabilities apply to PDO as well. What…