Thread: Sql and php
View Single Post
Old 11-13-2009, 04:24 PM   #6 (permalink)
farmdve
Recruit
 
Join Date: Nov 2009
Posts: 3
farmdve is on a distinguished road
Seeing this code i see quite a few security holes with those posts. Anyone can execute a simple mysql injection through those.
The password is ok tho but use mysql_real_escape_string on all the posts that you compare in the db
farmdve is offline   Reply With Quote