Re: syntax question

From: Date: Mon, 26 Mar 2007 17:14:16 +0000
Subject: Re: syntax question
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-251387@lists.php.net to get a copy of this message
At 3:59 PM +0100 3/26/07, Ross wrote:
Can I put post values directly into insert statements? $query = "INSERT INTO categories (category_name) VALUES ('$_POST['cat_name'])";
Open to sql injection. tedd -- ------- http://sperling.com http://ancientstones.com http://earthstones.com

« previous php.general (#251387) next »