Re: error Undefined index:
| From: | Christoph M. Becker | Date: | Tue, 27 Mar 2018 21:43:50 +0000 |
| Subject: | Re: error Undefined index: | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-326417@lists.php.net to get a copy of this message | ||
On 27.03.2018 at 20:34, Romero, Fernando wrote:
> <?php
>
> $empresa = $_POST['empresa'];
> $mes = $_POST['meses'];
> $anio = $_POST['anio'];
>
>
>
> if ( $_POST ) {
> $result=pg_query("SELECT empresa, sum(valor) valor FROM trabajos WHERE
> empresa='$empresa' and to_char(fecha, 'TMMONTH')::varchar = '$mes' and
> date_part('year', fecha)= '$anio'
> group by empresa");
This looks like a potentially exploitable SQL injection vulnerability,
see <http://www.php.net/manual/en/security.database.sql-injection.php>.
--
Christoph M. Becker