note 25953 deleted from function.mysql-query by didou

Note Submitter: phpinfo@t-online.de Writing a function to send multiple queries (delimited by ';') as shown in a user message above is really bad for security: Let's assume you have a input form, with field login_number. Instead of inserting the individual number 1374 an user inserts "1374;delete from login". When you forget to check this input, and the table login exists, then good night! Also it's not possible to determine which query failed in case of an error. I don't see any need to combine some queries. It's not faster than sending single queries, its a security hole.