note 72460 deleted from security.database.sql-injection by nlopess
| From: | nlopess@php.net | Date: | Fri, 19 Jan 2007 23:31:33 +0000 |
| Subject: | note 72460 deleted from security.database.sql-injection by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-121943@lists.php.net to get a copy of this message | ||
Note Submitter: bpruneau at gmail dot com
----
Pour prévenir l'injection texte / To prevent text injection:
$query = "select * from tblClient where name = '" .
str_replace("'","''",$_GET['Client']) .
"'";