Posted by Jerry Stuckle on 07/21/07 14:36

nelson.salvador@gmail.com wrote:
>> OK, and now is the time to learn about SQL-injection, and that you really
>> should escape your strings. People could destroy your database with the
>> form now.
>> --
>> Rik Wasmus
>
> Hi Rick,
>
> Could you make some examples "how to" can someone could destroy my
> database?
> ehheh
>
> This will be only to use in "localhost" intranet only...
> Only me working with this...
>
> But could you protect my code in better way?
>
> Best regards,
> PiRiCa
>

(Top posting fixed)

Google for SQL Injection. It can be very educational.

And the vast majority of corporate computer crime still originates
within the company - dissatisfied employees, etc. Just because you're
on an intranet doesn't mean you're safe.

And please don't top post. Thanks.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]