Re: Is this possible?
| From: | Chris Hayes | Date: | Wed, 11 Jun 2003 15:11:27 +0000 |
| Subject: | Re: Is this possible? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-151083@lists.php.net to get a copy of this message | ||
Please read these pages:
http://de.php.net/release_4_1_0.php
http://de.php.net/manual/en/security.registerglobals.php
if your PHP setting called register_globals is turned on, then the code you propose would allow hackers to ask anything they want to your database, including destructive options.
At 16:59 11-6-03, you wrote:
Hello PHP List, I would like to use links such as: <a href="index.php?tablename=table">table</a> The resulting page would have a line on it like such:$query = "SELECT * FROM $table";Is this possible? If so, is there maybe a better way to do this? Also, is it possible to show the names of the tables in PHP page? Thanks, -Steve Marquez -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php