Posted by Dave Nash on 01/11/07 12:21

On Thu, 11 Jan 2007 13:20:34 +0100, Michael Fesser <netizen@gmx.de>
wrote:

>.oO(Kim André Akerø)
>
>>Sure, if register_globals is set to "on" on both the local and live
>>servers. Rather, get used to using $_GET["catid"] instead of $catid.
>
>But _never_ use that directly in a query without validation.
>Google for SQL injection.
>
>Micha

Im assuming that this change to register globals wouldnt affect my
previous post " DB Cuts of Data"

Still cant work out this issue.

[Back to original message]