note 67908 deleted from security.database.sql-injection by bjori
| From: | bjori@php.net | Date: | Thu, 06 Jul 2006 11:18:50 +0000 |
| Subject: | note 67908 deleted from security.database.sql-injection by bjori | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-114503@lists.php.net to get a copy of this message | ||
Note Submitter: user at golden-board dot de
Reason: 1
----
Maybe you can use that:
$order_by = str_replace(array ("*", " ", "'", ",",
";", "´", "\"", "\\", "/", "%",
'$'), "", $_GET['order_by']);