I'm helping a collegue of mine to test if his website is completely SQLi-proof. It looks promising, but i'm trying to make sure, and by chance I know he's using
pg_escape_string to sanitize his
This may be a stupid question, but I'd like to know, if there is a way to specify the escape method for SQLMap?
Also as long as I'm here, I'd like to ask for opinions which would be the best escape method to use (PHP-PostgreSQL combination) is pg_escape_string sufficient or should he use something else?