query: Is 'my_real_escape_string' required after I validated and sanitized form data?
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 150090
negative_passages.text: Should I sanitize an email address before passing it to the is_email() function?
negative_passages.docid: 125850
negative_passages.text: Why is "&#8203;" being injected into my HTML?
negative_passages.docid: 106392
negative_passages.text: Escape HTML entities in JSP / JSPX: no solution for problem that should not even exist?
negative_passages.docid: 109042
negative_passages.text: Are there simple command line tools to decode a SQL Injection request string?
negative_passages.docid: 48485
negative_passages.text: How to prevent XSS (Cross Site Scripting) whilst allowing HTML input
negative_passages.docid: 106259
negative_passages.text: "Black marker" effect in the text (sanitization used to hide passwords in code example)
negative_passages.docid: 74188
negative_passages.text: How can I avoid SQL injection attacks in my ASP.NET application?
negative_passages.docid: 104314
negative_passages.text: avoid to escape a special characters in javascript
negative_passages.docid: 20114
negative_passages.text: Why are usernames allowed to be composed entirely of non-visible Unicode characters?
negative_passages.docid: 43804
negative_passages.text: Can I convert a C# string value to an escaped string literal?
negative_passages.docid: 64111
negative_passages.text: Is my JavaScript validating enough?
negative_passages.docid: 14522
negative_passages.text: When are you supposed to use escape instead of encodeURI / encodeURIComponent?
negative_passages.docid: 31315
negative_passages.text: "EOL while scanning single-quoted string"? (backslash in string)
negative_passages.docid: 117717
negative_passages.text: What are the best PHP input sanitizing functions?
negative_passages.docid: 21165
negative_passages.text: Escaping username characters in basic auth URLs
negative_passages.docid: 146549
negative_passages.text: Sanitizing global string attributes - necessary or not?