Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #7477

Re: Help required with UPDATE columns

Path csiph.com!usenet.pasdenom.info!weretis.net!feeder4.news.weretis.net!storethat.news.telefonica.de!feedme.news.telefonica.de!telefonica.de!fu-berlin.de!uni-berlin.de!not-for-mail
From "M. Strobel" <sorry_no_mail_here@nowhere.dee>
Newsgroups comp.lang.php
Subject Re: Help required with UPDATE columns
Date Tue, 06 Nov 2012 19:30:23 +0100
Lines 32
Message-ID <aft39vF3k47U1@mid.uni-berlin.de> (permalink)
References <ff0i989e35u20dfsfalfah7e77o4lbit41@4ax.com> <k7b0nc$vvr$1@dont-email.me> <2525795.FS5DWkFXQh@PointedEars.de> <k7bjj3$sp5$1@dont-email.me> <1378599.qsJR3PFr2n@PointedEars.de> <k7bkcs$2r6$1@dont-email.me>
Mime-Version 1.0
Content-Type text/plain; charset=UTF-8
Content-Transfer-Encoding quoted-printable
X-Trace news.uni-berlin.de eLNjFYtD3pyOUdcFuRjC8wNOOysPZe+g62oiaeF4s25n3zOG0n3euzsqi8ByRy+jc=
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:16.0) Gecko/20121025 Thunderbird/16.0.2
In-Reply-To <k7bkcs$2r6$1@dont-email.me>
Xref csiph.com comp.lang.php:7477

Show key headers only | View raw

Am 06.11.2012 19:20, schrieb Shake:
> El 06/11/2012 19:13, Thomas 'PointedEars' Lahn escribió:
>>
>> You are mistaken.  Whether the query is syntactically wrong in the DBMS
>> depends on the data type, the value of the variable (that we do not know, do
>> we?) and the query language.
> 
> You do not know. I know it.
> Your limitations are not my mistake.
> 
> mytable.drawing values have to be enclosed by quotes.
> 
>>
>> The actual and much more grave issue here is that the OP is using user input
>> ($_POST['…']) unchecked and unescaped, which allows for SQL injection.  If
>> they fixed that with Prepared Statements, both problems would go away.
> 
> Right. Still not a MySQL issue: An SQL issue.
> 

This sounds quite aggressive for someone showing so many coding problems. You could
have seen the sql error in your first posting.

/Str.

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Help required with UPDATE columns Dynamo - 2012-11-06 12:40 +0000
  Re: Help required with UPDATE columns Shake <QUITAESTO@QUITAESTO.NOES> - 2012-11-06 13:44 +0100
    Re: Help required with UPDATE columns Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-11-06 18:59 +0100
      Re: Help required with UPDATE columns Shake <QUITAESTO@QUITAESTO.NOES> - 2012-11-06 19:06 +0100
        Re: Help required with UPDATE columns Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-11-06 19:13 +0100
          Re: Help required with UPDATE columns Shake <QUITAESTO@QUITAESTO.NOES> - 2012-11-06 19:20 +0100
            Re: Help required with UPDATE columns "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-11-06 19:30 +0100
              Re: Help required with UPDATE columns Shake <QUITAESTO@QUITAESTO.NOES> - 2012-11-06 19:45 +0100
                Re: Help required with UPDATE columns Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-11-06 19:57 +0100
                Re: Help required with UPDATE columns "M. Strobel" <sorry_no_mail_here@nowhere.dee> - 2012-11-06 20:36 +0100
            Re: Help required with UPDATE columns Thomas 'PointedEars' Lahn <PointedEars@web.de> - 2012-11-06 19:53 +0100
              Re: Help required with UPDATE columns Shake <alex.estevezQUENO@QUENOfilnet.es> - 2012-11-06 20:36 +0100
            Re: Help required with UPDATE columns Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-06 15:02 -0500
    Re: Help required with UPDATE columns Dynamo - 2012-11-07 11:07 +0000
  Re: Help required with UPDATE columns Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-06 08:15 -0500
    Re: Help required with UPDATE columns Dynamo - 2012-11-07 11:05 +0000
      Re: Help required with UPDATE columns Jerry Stuckle <jstucklex@attglobal.net> - 2012-11-07 07:07 -0500

csiph-web