php - Does hash values contain quotes? -
does hash values contain quotes?
if dependent algorithm, want know blowfish
using phpass
.
i'm asking in regard sql injection because don't want prepare
query authentication
, use place holders
, wrapping username
, password hash
in quotes. ( have doubt username
safe when validated consist of word chars [a-wa-w1-9_]
(no quotes or other special chars)? )
yes, hash values can contain quotes. usernames.
you should not base database-interaction on fragile assumption never should have (because hope not prepare sounds ridiculous).
instead make database query safe possible regardless assume data be. things go wrong on end , don't want error stored in persistence layer nor want offer potential door sql injection.