note 120055 added to mongodb.security.script_injection

Shouldn't the second example have this $_GET['field'] = "'); db.users.drop(); print('"; Before it sets $username? ---- Server IP: 72.52.91.14 Probable Submitter: 81.149.124.218 ---- Manual Page -- http://php.net/manual/en/mongodb.security.script_injection.php Edit -- https://master.php.net/note/edit/120055 Del: integrated -- https://master.php.net/note/delete/120055/integrated Del: useless -- https://master.php.net/note/delete/120055/useless Del: bad code -- https://master.php.net/note/delete/120055/bad+code Del: spam -- https://master.php.net/note/delete/120055/spam Del: non-english -- https://master.php.net/note/delete/120055/non-english Del: in docs -- https://master.php.net/note/delete/120055/in+docs Del: other reasons-- https://master.php.net/note/delete/120055 Reject -- https://master.php.net/note/reject/120055 Search -- https://master.php.net/manage/user-notes.php