Author: Alan Pope Date: To: Hampshire LUG Discussion List Subject: Re: [Hampshire] A little help with php / mysql
2009/2/4 Chris Smith <cjs94@???>: > Brian Chivers wrote:
>> mysql_query(INSERT INTO stream (channel, starttime, title,
>> description, genre, filename) VALUES
>> ('$channel','$starttime','$title','$description','$genre','$filename'));
>>
>
> It sounds like you're not doing any form of input validation; you really
> should, otherwise you leave yourself open to all sorts of nasty attacks.
>
