note 87710 deleted from function.mysql-fetch-array by danbrown
| From: | danbrown@php.net | Date: | Wed, 17 Dec 2008 20:37:16 +0000 |
| Subject: | note 87710 deleted from function.mysql-fetch-array by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-148281@lists.php.net to get a copy of this message | ||
Note Submitter: Keisial at gmail dot com
----
Regarding the message by info at o08 dot com, that mysql_insert_array function is vulnerable to SQL
injection. You should use mysql_real_escape_string on every element on $values (assuming that
$keys are trustworthy).