3 ms·
friend, don't do this: https://codeberg.org/JojoYou/PriEco/src/branch/master/api/google.php#L12 https://codeberg.org/JojoYou/PriEco/src/branch/master/api/go...
by mdaniel 3y ago
friend, don't do this: https://codeberg.org/JojoYou/PriEco/src/branch/master/api/google.php#L12 https://codeberg.org/JojoYou/PriEco/src/branch/master/api/go...
- JojoYou 3y agoHey, thank you for the comment. What is wrong about it?
- Nilithus 3y agoThis is insecure code that is susceptible to SQL injection. Check out https://phptherightway.com/#databases https://phptherightway.com/#databases and read the PDO section. It gives almost your exact code as an example of what not to do. Look at using PDO bound parameters. You never want to concat strings together to create sql. Especially with strings that come from untrusted sources.