Should I escape and sanitize data from facebook connect?
I'm using the facebook php sdk for a facebook app.
How safe is the $me = $facebook->api('/me')
object? s开发者_StackOverflow社区hould I escape and sanitize the 'name' and 'id' I get before querying the database?
It is probably always a good idea to sanitize input from external systems that are not under your control. I would definitely do it.
精彩评论