sanitize html form radio, checkbox, option input prior to mysql?

[chucklarge]

Hi,
I am wondering if it makes any difference if i sanitize( [MAN]mysql_real_escape_string[/MAN] & [MAN]strip_tags[/MAN] ) html form POST variables prior to insertion into a mysql db if the values are numeric from radio buttons, checkboxes and option inputs?
Maybe a better question is will sanitizing numeric data will affect it negatively.
Ok sorry, as i am thinking about this more, i am getting a bit confused. I assume that html form POST data comes in a strings? So it shouldn't matter if i escape it?

Sorry for the unorganized thoughts

Chuck

[Weedpacket]

Yes. Better yet, check first to make sure the data is sensible (i.e., numeric, or whathaveyou). No data coming in from the outside world can be trusted.

This is because you can't be sure that the submitted data really came from someone filling in your form and is not any old rot someone cobbled together with which to try and break your site.

Be paranoid. Someone, somewhere, is out to get you.