Re: Re: PHP 4.3.3RC3 Released
| From: | Derick Rethans | Date: | Thu, 14 Aug 2003 07:32:56 +0000 |
| Subject: | Re: Re: PHP 4.3.3RC3 Released | ||
| References: | 1 2 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-3900@lists.php.net to get a copy of this message | ||
On Thu, 14 Aug 2003, moshe doron wrote:
> What about hacking somehow the sqlite library to disallow chained queries
> (or at least do it optionally)?
>
> This behavior is *huge* security hole, allow to the cracker drop ur database
> using simple select where query.
How is this a security hole?
regards,
Derick
--
"Interpreting what the GPL actually means is a job best left to those
that read the future by examining animal entrails."
-------------------------------------------------------------------------
Derick Rethans http://derickrethans.nl/
International PHP Magazine http://php-mag.net/
-------------------------------------------------------------------------