Posted by Michael Fesser on 01/11/07 12:20

..oO(Kim André Akerø)

>Sure, if register_globals is set to "on" on both the local and live
>servers. Rather, get used to using $_GET["catid"] instead of $catid.

But _never_ use that directly in a query without validation.
Google for SQL injection.

Micha

[Back to original message]