4 ms·
> You can also escape the scans ... ... or by splitting the SQL string over multiple lines. Or building it up by concatenating strings. Let's stop this now, we
by oneeyedpigeon 10y ago
> You can also escape the scans ...
... or by splitting the SQL string over multiple lines. Or building it up by concatenating strings. Let's stop this now, we've demonstrated that the code is very brittle :)
- tyingq 10y agoAnother comment mentions that it would skip $_GET['whatever'] and $_POST['whatever'], which is probably in the most egregiously vulnerable code. I think the underscore thing is worth fixing.