paranoiacblack/UCR-Papillon — comment on commit 316ad50f6907e0396518d41d1308ccae62ecacb4
File:  line 0
By paranoiacblack:

Very nice. This will be helpful for anyone who doesn't understand who php works together to accomplish a web protocol. The only thing that bugs me is your sanitize.php. You should probably never be using mysql directly like that (also mysql_real_escape_string isn't really that safe anyways). The preferred solution is using PDO (prepared document object) statements. For those who don't know about it, read about it here: http://php.net/manual/en/intro.pdo.php