Postgres Pro
Downloads
Home   >   mailing lists

SQL injection, php and queueing multiple statement - Mailing list pgsql-general

From Ivan Sergio Borgonovo
Subject SQL injection, php and queueing multiple statement
Date
Msg-id 20080411212128.6c6bcb2d@webthatworks.it
Whole thread Raw
Responses Re: SQL injection, php and queueing multiple statement  ("Adam Rich" <adam.r@sbcglobal.net>)
Re: SQL injection, php and queueing multiple statement  ("Dawid Kuroczko" <qnex42@gmail.com>)
Re: SQL injection, php and queueing multiple statement  (Yasuo Ohgaki <yohgaki@ohgaki.net>)
List pgsql-general
Tree view 
Is there a switch (php side or pg side) to avoid things like:

pg_query("select id from table1 where a=$i");

into becoming

pg_query("select id from table1 where a=1 and 1=1; do something
nasty; -- ");

So that every
pg_query(...) can contain no more than one statement?

thanks

--
Ivan Sergio Borgonovo
http://www.webthatworks.it

pgsql-general by date:

Previous
From: Oleg Bartunov
Date:
Subject: Re: tsearch2 and hyphenated terms
Next
From: "Adam Rich"
Date:
Subject: Re: SQL injection, php and queueing multiple statement