Re: cvs: phpdoc /en/security database.xml
| From: | Jakub Vrana | Date: | Sun, 13 Feb 2005 22:42:23 +0000 |
| Subject: | Re: cvs: phpdoc /en/security database.xml | ||
| References: | 1 2 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969366571@lists.php.net to get a copy of this message | ||
Nuno Lopes wrote:
> AFAIK MySQL doesn't allow multiple querys (except with
> mysqli_multi_query()), so the example was wrong.
> But other DBs allow it. I don't know if it is the case of PostgreSQL (the
> second example), but at least the example could be adapted to work.
> What do you think?
I agree but I didn't find any meaningful example. I thought about
stupid mysql_query($_GET["query"]) but it's not about the SQL
injection. Maybe with subqueries something can be done but they are
not in MySQL < 4.1.
Multiple SQL commands will not work with mysql_query, pg_query and
sqlite_query (if returned value is used) AFAIK.
Jakub Vrana