Sql-injection functions and techniques for escaping(take 3):
commitf2c32649c3020a276eabf161e5ad2ad54f26d7b1
authorbradymiller <bradymiller@users.sourceforge.net>
Sat, 2 Mar 2013 07:45:37 +0000 (1 23:45 -0800)
committerbradymiller <bradymiller@users.sourceforge.net>
Sun, 17 Mar 2013 07:22:16 +0000 (17 00:22 -0700)
tree2b09b8d97dacc512e1395d4be285b35cd00f70ac
parent6e5f7bd9f4b34883ce3ecf2a46af2ebbae239a5e
Sql-injection functions and techniques for escaping(take 3):
1. When variables within limits
2. When variable for the sort order
3. When variable for an identifier
(all of these are things that are exceptions to standard binding/escaping)
interface/globals.php
library/formdata.inc.php
library/pnotes.inc