note 74660 deleted from function.mysql-escape-string by nlopess
| From: | nlopess@php.net | Date: | Tue, 01 May 2007 13:41:08 +0000 |
| Subject: | note 74660 deleted from function.mysql-escape-string by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-126047@lists.php.net to get a copy of this message | ||
Note Submitter: Spud
----
DON'T USE the above function cleanmysql($arr,$arr2) it compromised my website...
you can override the $_SESSION vars by using it:
http://www.mydomain.com/?_SESSION[userid]=foo