On Wed, Jun 23, 2010 at 2:53 AM, Tanel Tammik <keevitaja@xxxxxxxxx> wrote: > Hi, > > is there a vulnerability with using $_SERVER['REMOTE_ADDR'] in sql queries? > > Br > Tanel > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > > As long as you treat it with the same caution that you do general form input (e.g., proper validation, escaping for mysql or using prepared statements, etc.), you'll be fine ;) Adam -- Nephtali: PHP web framework that functions beautifully http://nephtaliproject.com