note 40956 added to security.database

From: Date: Wed, 24 Mar 2004 17:33:35 +0000
Subject: note 40956 added to security.database
Groups: php.notes 
Request: Send a blank email to php-notes+get-67113@lists.php.net to get a copy of this message
the example regarding the sql statement injection for mysql does not make any sense as the mysql_query function does not allow semicolons within the query, unless of course multiple queries was part of the original script then security need be implemented. if not, then the script will fail displaying an error at the point of the semicolon. in addition, the query string in the same example contains a semicolon at the end, which is in violation of the note to not include semicolons. ---- Manual Page -- http://www.php.net/manual/en/security.database.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+40956 Delete -- http://master.php.net/manage/user-notes.php?action=delete+40956&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+40956&report=yes Search -- http://master.php.net/manage/user-notes.php

« previous php.notes (#67113) next »