Re: Unexpected T_ENCAPSED...
| From: | Philip Olson | Date: | Sat, 24 Jul 2004 19:11:09 +0000 |
| Subject: | Re: Unexpected T_ENCAPSED... | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-191763@lists.php.net to get a copy of this message | ||
> Sorry, let me clearify.. unless UserId is an integer, quote it !!
And quoting integers is not a problem, I even prefer it. IMHO we should
tell people to quote all values so if someone "forgets" to do any sort of
input validation (i.e. make sure it's actually an integer) there won't be
a major problem otherwise problems (including SQL injection) may arise.
Regards,
Philip