FUDforum: comp.lang.php » fetch items from a row

Home » Imported messages » comp.lang.php » fetch items from a row

Show: Today's Messages :: Polls :: Message Navigator

Re: fetch items from a row [message #182438 is a reply to message #181289]

Sun, 04 August 2013 17:06

Mladen Gogala
Messages: 13
Registered: December 2010

Karma:

Junior Member

On Fri, 03 May 2013 21:49:52 +0100, Tim Streater wrote:

> More likely:
>
> $result = mysql_query("SELECT id,email FROM people WHERE id = '" .
> $_GET['number'] . "'");

And the code like that is the basis for all SQL injection attacks. It's
so frequent that even comic strips have been written about it:

http://xkcd.com/327/

If you have such code in the client facing application, prepare to meet
little Bobby Tables.

--
Mladen Gogala
The Oracle Whisperer
http://mgogala.byethost5.com

Report message to a moderator

[Message index]

		fetch items from a row By: richard on Fri, 03 May 2013 19:55
		Re: fetch items from a row By: Salvatore on Fri, 03 May 2013 20:18
		Re: fetch items from a row By: Tim Streater on Fri, 03 May 2013 20:49
		Re: fetch items from a row By: Mladen Gogala on Sun, 04 August 2013 17:06
		Re: fetch items from a row By: Tim Streater on Sun, 04 August 2013 17:41
		Re: fetch items from a row By: The Natural Philosoph on Sun, 04 August 2013 21:27
		Re: fetch items from a row By: Tim Streater on Sun, 04 August 2013 22:15
		Re: fetch items from a row By: Jerry Stuckle on Mon, 05 August 2013 02:09
		Re: fetch items from a row By: Denis McMahon on Fri, 03 May 2013 20:47
		Re: fetch items from a row By: Richard Yates on Fri, 03 May 2013 21:00
		Re: fetch items from a row By: Scott Johnson on Fri, 03 May 2013 21:21
		Re: fetch items from a row By: Lew Pitcher on Fri, 03 May 2013 21:38
		Re: fetch items from a row By: Richard Yates on Fri, 03 May 2013 22:15
		Re: fetch items from a row By: SwissCheese on Sat, 04 May 2013 09:56
		Re: fetch items from a row By: The Natural Philosoph on Sat, 04 May 2013 10:08
		Re: fetch items from a row By: The Natural Philosoph on Sat, 04 May 2013 10:06
		Re: fetch items from a row By: The Natural Philosoph on Sat, 04 May 2013 10:05
		Re: fetch items from a row By: Denis McMahon on Mon, 05 August 2013 00:19

Previous Topic:	Hopiing for some leads as to what may be wrong in this code
Next Topic:	sql order but move some rows bottom

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Sat Nov 30 21:19:45 GMT 2024

Total time taken to generate the page: 0.04159 seconds