Re: PHP for preventing SQL injections?

[David Bernick <bernz () bernztech org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Lefevre, Steven wrote:
| Hey folks -
|
| Does anyone know of a regexp for checking SQL strings for injection
| attempts?

decent ones, but not perfect:

insert[[:space:]]+into
delete( |\n)+from
update[[:space:]]+set
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE/aLq2zR9WeS6DURURAihcAJ410W7Vee7T0i7/8XB6WfsRSUdy0QCZAQ2C
oNP+7slf8v0DgtXgmk/ix6Q=
=JmU4
-----END PGP SIGNATURE-----