|
|
Posted by Dave Nash on 01/11/07 12:21
On Thu, 11 Jan 2007 13:20:34 +0100, Michael Fesser <netizen@gmx.de>
wrote:
>.oO(Kim André Akerø)
>
>>Sure, if register_globals is set to "on" on both the local and live
>>servers. Rather, get used to using $_GET["catid"] instead of $catid.
>
>But _never_ use that directly in a query without validation.
>Google for SQL injection.
>
>Micha
Im assuming that this change to register globals wouldnt affect my
previous post " DB Cuts of Data"
Still cant work out this issue.
Navigation:
[Reply to this message]
|