Please read these pages: http://de.php.net/release_4_1_0.php http://de.php.net/manual/en/security.registerglobals.php
if your PHP setting called register_globals is turned on, then the code you propose would allow hackers to ask anything they want to your database, including destructive options.
At 16:59 11-6-03, you wrote:
Hello PHP List,
I would like to use links such as:
<a href="index.php?tablename=table">table</a>
The resulting page would have a line on it like such:
$query = "SELECT * FROM $table";
Is this possible? If so, is there maybe a better way to do this?
Also, is it possible to show the names of the tables in PHP page?
Thanks,
-Steve Marquez
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php