> How can we avoid this security risk using PHP & postgreSQL?. Be sure to verify all input from the untrusted source is valid, and after you do that, be sure to escape it using pg_escape_string() or pg_escape_bytea().
Attachment:
signature.asc
Description: This is a digitally signed message part