note 47704 added to tutorial.forms

Doing something like: "delete from some_table where id=' " . $_GET['id'] could be a bad idea from a security standpoint. All a hacker has to do is change the URL to something like: blah.com?id=1 or id != 1 ...and delete all the rows from some_table. ---- Manual Page -- http://www.php.net/manual/en/tutorial.forms.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+47704 Delete -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes Reason: bad code -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes&reason=bad+code Reason: spam -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes&reason=spam Reason: useless example -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes&reason=useless+example Reason: contains commercial links -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes&reason=contains+commercial+links Reason: useless note -- http://master.php.net/manage/user-notes.php?action=delete+47704&report=yes&reason=useless+note Reject -- http://master.php.net/manage/user-notes.php?action=reject+47704&report=yes Search -- http://master.php.net/manage/user-notes.php