Changes password -> username in the text, as pointed out by (Raja dot Kapur at gmail dot com).

git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@308258 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
Daniel P. Brown 2011-02-11 14:47:05 +00:00
parent 9b22dffc68
commit 3a8a2c895a

View file

@ -21,7 +21,7 @@
<para>
Someone could subvert this by getting
<emphasis>http://www.example.com?password[$ne]=foo</emphasis>, which PHP
<emphasis>http://www.example.com?username[$ne]=foo</emphasis>, which PHP
will magically turn into an associative array, turning your query into
<literal>$collection->find(array("username" => array('$ne' => "foo")))</literal>,
which will return all users not named "foo" (all of your users, probably).