Re: Current Member Check
| From: | Chris Shiflett | Date: | Sun, 19 Dec 2004 19:54:53 +0000 |
| Subject: | Re: Current Member Check | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-204681@lists.php.net to get a copy of this message | ||
--- Brad Ciszewski <bradcis@charter.net> wrote:
> Please help me figure out what I did wrong.
>
> *connects to database*
>
> $email = $_POST["email"];
>
> $checkEmail = mysql_query("SELECT *
> FROM memberInformation
> WHERE email = '$email'");
Please read this:
http://php.net/manual/security.database.sql-injection.php
Chris
=====
Chris Shiflett - http://shiflett.org/
PHP Security - O'Reilly HTTP Developer's Handbook - Sams
Coming Soon http://httphandbook.org/