Entering a query
| From: | shaun | Date: | Tue, 15 Apr 2003 14:23:20 +0000 |
| Subject: | Entering a query | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-27096@lists.php.net to get a copy of this message | ||
Hi,
I have a form on my page that lets a user enter a query to the database, how
can I ensure that the user only enters 'SELECT' statements and therefore
doesn't drop the whole database or do anything else malicious?
Thanks for your help