mirror of
https://github.com/sigmasternchen/php-doc-en
synced 2025-03-16 00:48:54 +00:00
Reverting my revert, bug #30274 is correct
git-svn-id: https://svn.php.net/repository/phpdoc/en/trunk@169566 c90b9560-bf6c-de11-be94-00142212c4b1
This commit is contained in:
parent
ac99677b8c
commit
f89eccf0a6
1 changed files with 3 additions and 3 deletions
|
@ -1,5 +1,5 @@
|
|||
<?xml version="1.0" encoding="iso-8859-1"?>
|
||||
<!-- $Revision: 1.19 $ -->
|
||||
<!-- $Revision: 1.20 $ -->
|
||||
<!-- splitted from ./en/functions/mysql.xml, last change in rev 1.100 -->
|
||||
<refentry id="function.mysql-real-escape-string">
|
||||
<refnamediv>
|
||||
|
@ -88,7 +88,7 @@ mysql_query($query);
|
|||
|
||||
// We didn't check $_POST['password'], it could be anything the user wanted! For example:
|
||||
$_POST['username'] = 'aidan';
|
||||
$_POST['password'] = "' OR 1=1";
|
||||
$_POST['password'] = "' OR ''='";
|
||||
|
||||
// This means the query sent to MySQL would be:
|
||||
echo $query;
|
||||
|
@ -100,7 +100,7 @@ echo $query;
|
|||
</para>
|
||||
<screen>
|
||||
<![CDATA[
|
||||
SELECT * FROM users WHERE name='aidan' AND password='' OR 1=1
|
||||
SELECT * FROM users WHERE name='aidan' AND password='' OR ''=''
|
||||
]]>
|
||||
</screen>
|
||||
<para>
|
||||
|
|
Loading…
Reference in a new issue