|
Posted by Pedro Graca on 01/20/06 03:17
Andy Hassall wrote:
> On 19 Jan 2006 20:17:02 GMT, Pedro Graca <hexkid@dodgeit.com> wrote:
>
>> $sql = "update user_table set validated=1 where code='{$_GET['code']}'";
>
> I'm sure you know better than to do this :-) SQL injection ahoy - remember to
> escape appropriately, or use a library that implements (or at least emulates)
> placeholders.
Of course! I was just testing the audience :-)
Thank you for being on the lookout and calling attention to the errors
commited. It's appreciated.
--
If you're posting through Google read <http://cfaj.freeshell.org/google>
Navigation:
[Reply to this message]
|