Normal
0
false
false
false
EN-US
X-NONE
X-NONE
MicrosoftInternetExplorer4
...
Deepika and I had a beautiful relationship, says Ranbir Kapoor
Tuesday, September 11, 2012
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
MicrosoftInternetExplorer4
...
Sonakshi and Saif in ‘Bullet Raja’
Tuesday, September 11, 2012
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
MicrosoftInternetExplorer4
Tigmanshu Dhulia’s determined to act gangster film ‘Bullet Raja’ will see Chhote
Nawab Saif Ali Khan and the sweet Sonakshi Sinha...
PHP Programming Guidelines (Part 2)
Tuesday, September 11, 2012
4. SQL-injection
The term SQL-injection is used to describe the injection of commands into an
existing SQL query. The Structured Query Language (SQL) is a textual language
used to interact with database servers like MySQL, MS SQL and Oracle.
Why not start out with an example?
$iThreadId = $_POST['iThreadId'];
// Build SQL query
$sSql = 'SELECT sTitle FROM threads
WHERE iThreadId = ' . $iThreadId;
To see what's wrong with to code above, let's take a look at the following
HTML code:
<form
method="post" action="insecure.php">
...
PHP Programming Guidelines (Part 1)
Tuesday, September 11, 2012
Normal
0
false
false
false
EN-US
X-NONE
X-NONE
MicrosoftInternetExplorer4
...
