Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.albasani.net!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "J.O. Aho" <user@example.net>
Newsgroups: comp.lang.php
Subject: Re: PS Re: GUI designer in html
Date: Mon, 05 Aug 2013 06:41:21 +0200
Lines: 25
Message-ID: <b68oniF7p87U1@mid.individual.net>
References: <5d478759-277d-41b1-bdab-f6e1b2076093@googlegroups.com> <ktm0jc$nf7$1@speranza.aioe.org> <b67g6gFu7vhU1@mid.individual.net> <ktmt1e$bq1$1@dont-email.me>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Trace: individual.net ZmcEJXAdCOBS+/YDp3s+wQvQ5FM24KQO4zsh9L9Sqc+yVqNBw1
Cancel-Lock: sha1:6NfXD/wXKy5KGlZ5RSu594vm504=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:17.0) Gecko/20130628 Thunderbird/17.0.7
In-Reply-To: <ktmt1e$bq1$1@dont-email.me>
Xref: csiph.com comp.lang.php:10409

On 05/08/13 02:59, Norman Peelman wrote:
> On 08/04/2013 01:09 PM, J.O. Aho wrote:

>> Rule one, always validate user input, no matter if it's always your
>> mother who does the input, one day she may just try to see what happens
>> if she enters "'; drop database youdatabase; #" as input and as you
>> never have a backup of the database, you lost everything.
>>
>>
>
>    That's only if you go out of your way to enable multiple statements
> by using 'mysqli_multi_query()', which doesn't support prepared
> statements. By default mysqli_query() and mysqli_real_query() do not
> allow multiple queries separated by semi-colons.
>
> http://us2.php.net/manual/en/mysqli.quickstart.multiple-statement.php

Unless something changed, mysqli_query supports multiple statements, but 
the return value do not support to give you the result from all the 
queries, I think it returned the last one.

-- 

  //Aho