video #38E - Advance PHP | SQL (Insert, Update, Delete)

On this video we are discussing the "preg_replace" function. We are using “preg_replace” to replace any script or styles sent through the form with a space. This protect against an injection attack. The “strip_tags()” function strips away any HTML, XML, and PHP tags. The “htmlentities()” function converts characters to HTML entities.
You cycles through an array using the “preg_match" function that gets rid of any “SQL” injection. The “preg_match" function matches a pattern and validate your form.