Recent Features
| |||||||||||||
Github compromised, or not?!Github compromised, or not?!Posted Mar 6, 2012 8:22 UTC (Tue) by Los__D (guest, #15263)In reply to: Github compromised, or not?! by XTF Parent article: Github compromised
Wouldn't that be MySQL's mysql_query?
(Log in to post comments)
Github compromised, or not?! Posted Mar 9, 2012 12:57 UTC (Fri) by knobunc (subscriber, #4678) [Link]
Nope. mysql_query() is PHP's dangerous by default interface to the mysql DB. There are better ways to do it, but that was one of the earliest, and is documented all over the place.
http://www.php.net/manual/en/function.mysql-query.php
The problem is that it makes it easy to forget to escape the parameters to your queries. Prefer something with placeholders/bind variables.
Github compromised, or not?! Posted Mar 9, 2012 13:21 UTC (Fri) by Los__D (guest, #15263) [Link]
Ah, I was under the impression that mysql_query() was provided by MySQL AB.
|
|||||||||||||