Re: #28519 [NEW]: TASK: identify orphan user notes and mass assign
| From: | Jakub Vrana | Date: | Wed, 02 Jun 2004 07:28:09 +0000 |
| Subject: | Re: #28519 [NEW]: TASK: identify orphan user notes and mass assign | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969361138@lists.php.net to get a copy of this message | ||
Gabor Hojtsy wrote:
> Then still I am conserned about the vulnerability of this code against
> SQL injection in case magic_quotes is turned off, but AFAIK some other
> code in the master module also relies on that setting. I would like to
> ask the system guys first if we still should rely on it?
Relying on magic_quotes is not the biggest problem. E.g. this line makes
me scared:
> DELETE FROM note WHERE id=$id
Jakub Vrana