Security issue / sql injection with mysql collation?

jerome23

New Member
Perhaps I don't have enough of an understanding of this yet, so I'm looking for a little direction.All of our tables show a collation of latin1_swedish_ci. Here's what I see in the mysql variables:\[code\]collation connection utf8_general_ci(Global value) latin1_swedish_cicollation database latin1_swedish_cicollation server latin1_swedish_ci\[/code\]Now, we see utf8 (or, at least, foreign language content) stored in the db pretty frequently, and it renders correctly. Does the collation not matter for this?Using something like php addslashes() on user input - is this sufficient? Or, does this leave an injection opportunity?EDIT:So, looking at the full set of collation / charset settings, at least in phpmyadmin, I see:\[code\]character set client utf8(Global value) latin1character set connection utf8(Global value) latin1character set database latin1character set filesystem binarycharacter set results utf8(Global value) latin1character set server latin1character set system utf8character sets dir /usr/share/mysql/charsets/collation connection utf8_general_ci(Global value) latin1_swedish_cicollation database latin1_swedish_cicollation server latin1_swedish_ci\[/code\]
 
Back
Top