note 112220 added to function.pg-query

A quick note for novice users: when gathering input from fields on a web form that maintains a database connection, *never* use pg_query to do queries from the field. Always sanitize input using pg_prepare and pg_execute. ---- Server IP: 69.147.83.199 Probable Submitter: 128.206.40.209 ---- Manual Page -- http://php.net/manual/en/function.pg-query.php Edit -- https://master.php.net/note/edit/112220 Del: integrated -- https://master.php.net/note/delete/112220/integrated Del: useless -- https://master.php.net/note/delete/112220/useless Del: bad code -- https://master.php.net/note/delete/112220/bad+code Del: spam -- https://master.php.net/note/delete/112220/spam Del: non-english -- https://master.php.net/note/delete/112220/non-english Del: in docs -- https://master.php.net/note/delete/112220/in+docs Del: other reasons-- https://master.php.net/note/delete/112220 Reject -- https://master.php.net/note/reject/112220 Search -- https://master.php.net/manage/user-notes.php