Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.php > #10389

Re: fetch items from a row

Show all headers | View raw

On Fri, 03 May 2013 21:49:52 +0100, Tim Streater wrote:

> More likely:
> 
> $result = mysql_query("SELECT id,email FROM people WHERE id = '" .
> $_GET['number'] . "'");

And the code like that is the basis for all SQL injection attacks. It's 
so frequent that even comic strips have been written about it:

http://xkcd.com/327/

If you have such code in the client facing application, prepare to meet 
little Bobby Tables.


-- 
Mladen Gogala
The Oracle Whisperer
http://mgogala.byethost5.com

Back to comp.lang.php | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

fetch items from a row richard <noreply@example.com> - 2013-05-03 15:55 -0400
  Re: fetch items from a row Salvatore <sal@yojimbo.hack.invalid> - 2013-05-03 20:18 +0000
    Re: fetch items from a row Tim Streater <timstreater@greenbee.net> - 2013-05-03 21:49 +0100
      Re: fetch items from a row Mladen Gogala <gogala.mladen@gmail.com> - 2013-08-04 17:06 +0000
        Re: fetch items from a row Tim Streater <timstreater@greenbee.net> - 2013-08-04 18:41 +0100
        Re: fetch items from a row The Natural Philosopher <tnp@invalid.invalid> - 2013-08-04 22:27 +0100
          Re: fetch items from a row Tim Streater <timstreater@greenbee.net> - 2013-08-04 23:15 +0100
          Re: fetch items from a row Jerry Stuckle <jstucklex@attglobal.net> - 2013-08-04 22:09 -0400
  Re: fetch items from a row Denis McMahon <denismfmcmahon@gmail.com> - 2013-05-03 20:47 +0000
  Re: fetch items from a row Richard Yates <richard@yatesguitar.com> - 2013-05-03 14:00 -0700
    Re: fetch items from a row Scott Johnson <noonehome@chalupasworld.com> - 2013-05-03 14:21 -0700
    Re: fetch items from a row Lew Pitcher <lpitcher@teksavvy.com> - 2013-05-03 17:38 -0400
      Re: fetch items from a row Richard Yates <richard@yatesguitar.com> - 2013-05-03 15:15 -0700
        Re: fetch items from a row SwissCheese <swisscheese@cfl.rr.com> - 2013-05-04 05:56 -0400
          Re: fetch items from a row The Natural Philosopher <tnp@invalid.invalid> - 2013-05-04 11:08 +0100
    Re: fetch items from a row The Natural Philosopher <tnp@invalid.invalid> - 2013-05-04 11:06 +0100
  Re: fetch items from a row The Natural Philosopher <tnp@invalid.invalid> - 2013-05-04 11:05 +0100
  Re: fetch items from a row Denis McMahon <denismfmcmahon@gmail.com> - 2013-08-05 00:19 +0000

csiph-web