note 86947 deleted from function.odbc-exec by danbrown
| From: | danbrown@php.net | Date: | Tue, 11 Nov 2008 23:44:18 +0000 |
| Subject: | note 86947 deleted from function.odbc-exec by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-146405@lists.php.net to get a copy of this message | ||
Note Submitter: TommyO
----
re: Tov @ Networking Innovations LLC
My God that is the most insecure, ridiculous snippet I've ever seen. Within only a few tries
we could get username/passwords, credit card numbers, delete all of the content of your tables, or
simply get a full dump of your entire database, and have fun doing it.
Never ever ever trust user input, especially when dealing with a database.