|
Posted by Adam Plocher on 03/11/06 01:49
Ren, I have written up an article on SQL Injections that you might want
to look at, too. A SQL Injection is caused when an end-user modifies
your input value and adds their own SQL to it (which could result in a
deleted DB table or worse). For this particular example you could do
something simple like
if(!is_numeric($RID))
{
die("Invalid Input");
}
More information is here:
http://www.digitalpropulsion.org/blog/Programming/SQL_Injections_in_PHP_with_MySQL
Navigation:
[Reply to this message]
|