note 53106 deleted from security.database.sql-injection by bjori

From: Date: Wed, 12 Apr 2006 15:00:54 +0000
Subject: note 53106 deleted from security.database.sql-injection by bjori
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-107885@lists.php.net to get a copy of this message
Note Submitter: jakerosoft at hotmail dot com ---- // function query ($format, ...) { // accepts standard formatted string function arguments // as input and returns a resource identifier. function query() { $num_args = func_num_args(); if ($num_args < 1) return FALSE; $args = func_get_args(); $new_args = array(); $query = $args[0]; if ($num_args > 1) { $format = $args[0]; for ($i = 1; $i < $num_args; $i++) { $new_args[$i] = mysql_real_escape_string($args[$i]); } $query = vsprintf($format, $new_args); } return mysql_query($query, $this->link); }

« previous php.notes (#107885) next »