Re: Quotes in querys
| From: | Eric Butera | Date: | Wed, 14 Jan 2009 16:25:47 +0000 |
| Subject: | Re: Quotes in querys | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-286324@lists.php.net to get a copy of this message | ||
On Wed, Jan 14, 2009 at 11:17 AM, MikeP <mpeloso@princeton.edu> wrote:
> Hello,
> I am trying to get the following to work:
> "Select Netid from Users where Netid = '$_SESSION[phpCAS][user]'"
> Netid is a string type.
> No matter where of if I put the quotes, I still get array[phpCAS] not the
> value.
> If there is anything I still have trouble with after all these years its
> quoting variables.
> Help?
> Thanks
> Mike
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
Dude we just helped you with this same exact thing the other day. And
you're still allowing SQL injection.