Re: Querying a database for 50 users' information: 50 queries or a WHERE array?
| From: | Dotan Cohen | Date: | Wed, 14 Sep 2011 21:02:51 +0000 |
| Subject: | Re: Querying a database for 50 users' information: 50 queries or a WHERE array? | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-314857@lists.php.net to get a copy of this message | ||
On Wed, Sep 14, 2011 at 16:02, Eric Butera <eric.butera@gmail.com> wrote:
> Just out of curiosity, where are these ids coming from? Doing a raw
> implode on them like that is a sql injection vuln.
>
They are in an array. I do of course is_int() them first, plus some
other sanitation including mysql_real_escape_string().
--
Dotan Cohen
http://gibberish.co.il
http://what-is-what.com