note 112137 deleted from pdo.quote by aharvey
| From: | aharvey@php.net | Date: | Fri, 24 May 2013 17:58:16 +0000 |
| Subject: | note 112137 deleted from pdo.quote by aharvey | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-194908@lists.php.net to get a copy of this message | ||
Note Submitter: col dot shrapnel at gmail dot com
----
OMG, why a note from nemozny at gmail dot com is still here? HOW MANY INJECTIONS it made possible?
Removing quotes from PDO::qiuote IS A DISASTER! Do not use that stupid substr() solution - it will
actually open your query to injection.