|
Posted by Terence on 11/13/62 11:31
Ross wrote:
> What is the correct syntax for
>
> $query = "SELECT * FROM login where username='$_POST['username']' AND pass
> ='$_POST['pass']'";
>
>
> Thought this would work.
>
> R.
>
Search for "SQL Injection" and see why what you're doing is very
dangerous. Google is your friend.
Navigation:
[Reply to this message]
|