Re: Select and $_POST
| From: | Terence | Date: | Thu, 10 Nov 2005 00:34:22 +0000 |
| Subject: | Re: Select and $_POST | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-225483@lists.php.net to get a copy of this message | ||
Ross wrote:
What is the correct syntax for $query = "SELECT * FROM login where username='$_POST['username']' AND pass ='$_POST['pass']'"; Thought this would work. R. Search for "SQL Injection" and see why what you're doing is very dangerous. Google is your friend.