Re: #28519 [NEW]: TASK: identify orphan user notes and mass assign
| From: | Gabor Hojtsy | Date: | Wed, 02 Jun 2004 10:09:05 +0000 |
| Subject: | Re: #28519 [NEW]: TASK: identify orphan user notes and mass assign | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 12 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969361142@lists.php.net to get a copy of this message | ||
Well, how should I interpret this? How can we move forward? GobaThen still I am conserned about the vulnerability of this code against SQL injection in case magic_quotes is turned off, but AFAIK some other code in the master module also relies on that setting. I would like to ask the system guys first if we still should rely on it?Relying on magic_quotes is not the biggest problem. E.g. this line makes me scared:DELETE FROM note WHERE id=$id