note 112137 added to pdo.quote
| From: | col dot shrapnel at gmail dot com | Date: | Wed, 08 May 2013 22:26:14 +0000 |
| Subject: | note 112137 added to pdo.quote | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-194745@lists.php.net to get a copy of this message | ||
OMG, why a note from nemozny at gmail dot com is still here? HOW MANY INJECTIONS it made possible?
Removing quotes from PDO::qiuote IS A DISASTER! Do not use that stupid substr() solution - it will
actually open your query to injection.
----
Server IP: 69.147.83.199
Probable Submitter: 95.25.202.78
----
Manual Page -- http://php.net/manual/en/pdo.quote.php
Edit -- https://master.php.net/note/edit/112137
Del: integrated -- https://master.php.net/note/delete/112137/integrated
Del: useless -- https://master.php.net/note/delete/112137/useless
Del: bad code -- https://master.php.net/note/delete/112137/bad+code
Del: spam -- https://master.php.net/note/delete/112137/spam
Del: non-english -- https://master.php.net/note/delete/112137/non-english
Del: in docs -- https://master.php.net/note/delete/112137/in+docs
Del: other reasons-- https://master.php.net/note/delete/112137
Reject -- https://master.php.net/note/reject/112137
Search -- https://master.php.net/manage/user-notes.php