Re: Error(Newbie)

From: Date: Sun, 23 Jun 2002 04:11:17 +0000
Subject: Re: Error(Newbie)
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-103441@lists.php.net to get a copy of this message
>$query = "INSERT INTO stats (èû«ü[Ƥ]=û® >g¿C—vid, id, vn, >time, host, w÷åT`•òÆk¬ >ðhª…referrer, browser) VALUES ('', >'$id', '$_COOKIE >['tececo_stats']', '$time', >'$_SERVER['REMOTE_HOST']', '$_SERVER['HTTP_REFERER']', >'$_SERVER >['HTTP_USER_AGENT']'); "; I hope you are using addslashes on your $_COOKIE and $_SERVER vars, too, otherwise your query is wide open to some attacks... ---John Holmes...

« previous php.general (#103441) next »