note 10763 deleted from features.http-auth by irc-html
| From: | irc-html@php.net | Date: | Sat, 19 Jan 2002 20:27:49 +0000 |
| Subject: | note 10763 deleted from features.http-auth by irc-html | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-25308@lists.php.net to get a copy of this message | ||
I am astonished to see that some of the posters here are using user-originated userid and password
to construct sql queries without first escaping special characters, most notably apostrophe. This
page should be cleansed of this security hole, before more people cut-and-paste it.