|
Posted by Michael Fesser on 11/09/06 17:00
..oO(kenoli)
>So, suppose I wanted to derive something like:
>
>WHERE $key1=$value1 AND $key2=$value2 . . .
>
>from my $_POST?
>
>How would I construct that?
You should start with thinking about SQL injection. Using user-submitted
values in a database query without any validation is dangerous.
Micha
Navigation:
[Reply to this message]
|