If you ever find yourself perusing some of the default code that comes with CakePHP, you might find yourself somewhat curious and confused when you see such functions as <?php e(‘Hello World’);?> or <?pho echo h(‘<a href=””>Hello World</a>’);?>.
I know I certainly was and became determined to understand what the heck these were doing. It quickly became apparent that these were just two of the many built-in extension functions that are part of the CakePHP framework!
If you use a framework of some sort, you probably haven’t thought about SQL injection for some time – in fact it almost seems dated to even discuss it. However, security should never be overlooked and it’s important to not trust third party applications and people by default! So what is the best way to prevent SQL injection?
Google has long since ingrained into my brain how important every millisecond is when dealing with large amounts of traffic.