Simon Willison’s Weblog

PHP immune to SQL injection attacks

17th August 2002

An interesting thread on SitePoint about SQL injection attacks. One of the points brought up is that PHP is by default virtually immune to injection attacks thanks to magic quotes (discussed here yesterday).

Posted 17th August 2002 at 2:47 pm · Follow me on Mastodon, Bluesky, Twitter or subscribe to my newsletter

More recent articles

What happens if AI labs train for pelicans riding bicycles? - 13th November 2025
Reverse engineering Codex CLI to get GPT-5-Codex-Mini to draw me a pelican - 9th November 2025
Video + notes on upgrading a Datasette plugin for the latest 1.0 alpha, with help from uv and OpenAI Codex CLI - 6th November 2025

This is PHP immune to SQL injection attacks by Simon Willison, posted on 17th August 2002.

php 181 sql-injection 16

Next: Working on my blog

Previous: Tips for working from home

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe

Previously hosted at http://simon.incutio.com/archive/2002/08/17/phpSqlInjectionAttacks