Is it safe to insert into db?

I want to use FCKeditor to insert text and formatting directly into MSSQL db but wouldn't this be an opportunity for someone to run some malicious code, and if so can I use something to detect and reject it if it happens?

Wed, 10/17/2007 - 21:51

alfonsoml

Joined: 31/12/2006

Posts: 3735

Re: Is it safe to insert into db?

There are tons of references and tutorials about how to avoid SQL injection or any other kind of attack.
FCKeditor is just a tool to provide a nice frontend for the user to edit HTML, but you must do your protections on the server side and be careful in the way that you code your pages.