RE: [PHP-DB] storing images in database
| From: | Chip Wiegand | Date: | Wed, 26 Jan 2005 15:18:17 +0000 |
| Subject: | RE: [PHP-DB] storing images in database | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-38362@lists.php.net to get a copy of this message | ||
Thanks for all the tips guys. I'll keep the last couple for future
reference.
--
Chip
Gareth Heyes <gareth@ignited.co.uk> wrote on 01/26/2005 05:30:45 AM:
> >> if(isset($_GET['id'])) {
> >> $id=$_GET['id'];
> >> $query = "select bin_data, filetype from binary_data where id=$id";
>
> This is a really bad example, anybody can inject your query with
> malicious sql commands.
> Never trust user supplied data.
>
> --
> PHP Database Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>