note 3687 deleted from MySQL functions by danbeck
| From: | danbeck@php.net | Date: | Thu, 07 Sep 2000 14:47:09 +0000 |
| Subject: | note 3687 deleted from MySQL functions by danbeck | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-4341@lists.php.net to get a copy of this message | ||
Placeholders or some sort of quoting mechanism are both missing from PHP. This represents a very
serious security problem. See http://packetstorm.securify.com/0002-exploits/rfp2k01.txt
for a description of exploits available for the unwary.