Re: SQL Injection link
| From: | Hannes Magnusson | Date: | Sun, 07 Sep 2008 12:52:48 +0000 |
| Subject: | Re: SQL Injection link | ||
| References: | 1 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969379388@lists.php.net to get a copy of this message | ||
On Sun, Sep 7, 2008 at 11:03, Richard Quadling <rquadling@googlemail.com> wrote:
> Hi.
>
> In sort of response to #46011, should ALL functions which can alter a
> database have the link to
> http://php.net/manual/en/security.database.sql-injection.php as
> part
> of a Warning rather than just a note and have the warning much higher
> up the page? Or at least before the examples.
A <warning> sounds nice, but I think it should be where we always keep
them (the notes section).
A seealso to the escape function should obviously be linked too.
-Hannes