Re: url string being split
| From: | Jim Giner | Date: | Thu, 26 Apr 2012 17:37:35 +0000 |
| Subject: | Re: url string being split | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-317701@lists.php.net to get a copy of this message | ||
I"m no expert, but why would you expose a query to the world thru the use of
a GET? Why not just collect the params and build the string in your code?
That is how people hack into your database - via a re-formed query. You're
giving someone an open invitation.