Path: csiph.com!x330-a1.tempe.blueboxinc.net!usenet.pasdenom.info!weretis.net!feeder1.news.weretis.net!news.swapon.de!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail From: Arno Welzel Newsgroups: comp.lang.php Subject: Re: i getting this warning Date: Thu, 17 Nov 2011 14:34:54 +0100 Organization: A noiseless patient Spider Lines: 21 Message-ID: <4EC50D7E.5060208@arnowelzel.de> References: <616578.124.1321442274513.JavaMail.geo-discussion-forums@prmf13> <4ec3d299$0$28440$a8266bb1@newsreader.readnews.com> <4EC50CA0.9090009@arnowelzel.de> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 7bit Injection-Info: mx04.eternal-september.org; posting-host="dd4uQGf4fHOQcq7/hg1u1Q"; logging-data="16455"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX1/BKqwtZFHHEcSbdYVqtt9rzw5lWSPBkiQ=" User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:8.0) Gecko/20111105 Thunderbird/8.0 In-Reply-To: <4EC50CA0.9090009@arnowelzel.de> Cancel-Lock: sha1:4NGpDxaWuQI3u5u5C6uSLnSOafU= Xref: x330-a1.tempe.blueboxinc.net comp.lang.php:3812 Arno Welzel, 2011-11-17 14:31: [...] > 1) Do never trust data from outside > > 2) Always check results and do never assume successful execution Sorry - forgot this: 3) Do NOT use "root" to connect to the MySQL database and limit the access rights for the MySQL user as far as possible - if you never need to create or drop tables within your own scripts, then the user should not have the right for it. The same applies to any other operation within the database. -- Arno Welzel http://arnowelzel.de http://de-rec-fahrrad.de