Best way to prevent SQL injections in Joomla
问题 I take variables from POST method and query them on MySQL with Joomla 2.5. What is the most secured method to use ? Currently I'm using JRequest::getVar with mysql_real_escape_string. Is it correct ? $_POST with mysql_real_escape_string $password = mysql_real_escape_string($_POST["pwd"])); JRequest::getVar with mysql_real_escape_string $password= mysql_real_escape_string(JRequest::getVar('pwd', '', 'post')); JRequest::getVar $password= JRequest::getVar('pwd', '', 'post'); JInput $password =