note 58944 deleted from security.database.sql-injection by dmytton
| From: | dmytton@php.net | Date: | Mon, 21 Nov 2005 18:04:50 +0000 |
| Subject: | note 58944 deleted from security.database.sql-injection by dmytton | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-98899@lists.php.net to get a copy of this message | ||
Note Submitter: patofuofighter at yahoo dot com
Reason: bad code
----
If you're expecting a number from user input, you can do:
$num = $_GET['num'] + 0;
this way, if the user set a string on num you'll get 0.
Works for a lot of cases.