note 86947 added to function.odbc-exec

re: Tov @ Networking Innovations LLC My God that is the most insecure, ridiculous snippet I've ever seen. Within only a few tries we could get username/passwords, credit card numbers, delete all of the content of your tables, or simply get a full dump of your entire database, and have fun doing it. Never ever ever trust user input, especially when dealing with a database. ---- Server IP: 69.147.83.197 Probable Submitter: 67.100.55.240 ---- Manual Page -- http://www.php.net/manual/en/function.odbc-exec.php Edit -- https://master.php.net/note/edit/86947 Del: integrated -- https://master.php.net/note/delete/86947/integrated Del: useless -- https://master.php.net/note/delete/86947/useless Del: bad code -- https://master.php.net/note/delete/86947/bad+code Del: spam -- https://master.php.net/note/delete/86947/spam Del: non-english -- https://master.php.net/note/delete/86947/non-english Del: in docs -- https://master.php.net/note/delete/86947/in+docs Del: other reasons-- https://master.php.net/note/delete/86947 Reject -- https://master.php.net/note/reject/86947 Search -- https://master.php.net/manage/user-notes.php