Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

If you're running a PHP site, please, please turn off display_errors. It's really bad practice to have your PHP code dumping your query strings to the web when you have a failure.


If they cared about best practices for PHP they wouldn't be using mysql_real_escape_string().




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: