Re: Re: [ANNOUNCEMENT] Auth-1.3.1RC1 (beta) Released.
| From: | Daniel Convissor | Date: | Sat, 12 Aug 2006 14:23:19 +0000 |
| Subject: | Re: Re: [ANNOUNCEMENT] Auth-1.3.1RC1 (beta) Released. | ||
| References: | 1 2 | Groups: | php.pear.dev php.pear.general |
| Request: | Send a blank email to pear-dev+get-43683@lists.php.net to get a copy of this message | ||
Hi Adam:
On Fri, Aug 11, 2006 at 09:25:12AM +0800, Adam Ashley wrote:
> Basically it does automatic quoting of table and field names.
In your initial post, I thought you were talking about values. I
think automatically delimiting identifiers is a bad idea.
Field names entered into queries from program settings like this does
not constitute SQL injection.
--Dan
--
T H E A N A L Y S I S A N D S O L U T I O N S C O M P A N Y
data intensive web and database programming
http://www.AnalysisAndSolutions.com/
4015 7th Ave #4, Brooklyn NY 11232 v: 718-854-0335 f: 718-854-0409