|
|
Posted by grossespinne on 10/20/07 17:59
Hi, just one hint:
This statement:
> $heading = mysql_query("SELECT links_categories.category,
> links_categories.cat_id FROM links_categories WHERE $_POST[dropdown] =
> links_categories.cat_id") or die('Error, Heading select failed');
might be a security risk because it could allow mysql injection into
your database.
I mean an attacker could change the value of $_POST[dropdown] to be
some valid
mysql code and thus manipulate your databse. To fix this you should
use
mysql_real_escape_string() on each variable that holds input from the
user.
Navigation:
[Reply to this message]
|