access dB and sql injection

[itaym02]

Greetings.

I have two questions.

The first: I saw several days ago an article about sql injection with PHP and how to avoid it - I can't locate it again, Does anybody know where it is?

The second: How do I connect with PHP to Access dB (Don't ask why...)

Thanks
I Moav

[myrdhrin]

SQL Injection on SitePoint: SQL Injection Attacks - Are You Safe?

The second: How do I connect with PHP to Access dB (Don't ask why...)

Create an ODBC connection for that Access dB and look at the odbc_ functions in a PHP manual..

for example to open a odbc connection named MYAccessDB you'd do:

$dbconnection = odbc_connect('MYAccessDB', '', '');

There are other options but I'm not too familiar with them. Among them I know that you can create the ADO Com object directly in PHP and then use ADO methods (so if you're familiar with that library it could be a more interesting path the ODBC)