Re: SQL syntax error in PHP script. dunno what's wrong
| From: | Richard Lynch | Date: | Fri, 03 Aug 2001 02:16:12 +0000 |
| Subject: | Re: SQL syntax error in PHP script. dunno what's wrong | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-61055@lists.php.net to get a copy of this message | ||
> insert into test values (0,''; DELETE FROM test; ',1);
>
> and got this error
>
> ERROR 1064: You have an error in your SQL syntax near '' at line 1
>
> trying other variations either caused similar errors or added rows to my
> table.
>
> is it possible to sneak in a command in this manner?
I believe:
Earlier versions of PHP/MySQL would do this?
Other databases (Oracle?) would do this?
I was messing with the same question with PostgreSQL yesterday (?) and
couldn't hack it either...
YMMV
--
WARNING richard@zend.com address is an endangered species -- Use
ceo@l-i-e.com
Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm
Volunteer a little time: http://chatmusic.com/volunteer.htm