note 103838 rejected from function.odbc-exec by salathe
| From: | salathe@php.net | Date: | Fri, 06 May 2011 08:14:03 +0000 |
| Subject: | note 103838 rejected from function.odbc-exec by salathe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-179478@lists.php.net to get a copy of this message | ||
Note Submitter: philip at onlinegalleries dot com
----
You, sir, are an idiot.
You escape the values, but not the keys, what if I was to rename one of your fields to:
'); DROP *;