Protecting your PHP/MySQL queries from SQL Injection
Posted on April 6th, 2008
Leave comment
The following method was described as a safe way to execute mysql queries. // This is a vulnerable query. $query = "SELECT * FROM products WHERE name='$productname'"; mysql_query($query); // This just uses mysql_escape_string $query = sprintf("SELECT * FROM products WHERE name='%s'", mysql_real_escape_string($productname)); mysql_query($query); The above query will work, with select
ThinkFree- Online word document or spreadsheet
Posted on March 21st, 2008
Posted in: Web
http://www.thinkfree.com/ Ever found yourself out and about on business and you need to make a change to that word document or spreadsheet? A last minute tweak to the sales presentation you're about to make? And, horror of horror, you realise that you have incompatible software. Now you can word process