Re: $_SERVER['REMOTE_ADDR'] and sql injection
| From: | Simon J Welsh | Date: | Wed, 23 Jun 2010 07:01:15 +0000 |
| Subject: | Re: $_SERVER['REMOTE_ADDR'] and sql injection | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-306331@lists.php.net to get a copy of this message | ||
There's a vulnerability in using anything from the user in SQL queries. Escape it :)
On 23/06/2010, at 6:53 PM, Tanel Tammik wrote:
> Hi,
>
> is there a vulnerability with using $_SERVER['REMOTE_ADDR'] in sql queries?
>
> Br
> Tanel
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
---
Simon Welsh
Admin of http://simon.geek.nz/
Who said Microsoft never created a bug-free program? The blue screen never, ever crashes!
http://www.thinkgeek.com/brain/gimme.cgi?wid=81d520e5e