Please read these pages:
http://de.php.net/release_4_1_0.php
http://de.php.net/manual/en/security.registerglobals.php

if your PHP setting called register_globals is turned on, then the code you propose would allow hackers to ask anything they want to your database, including destructive options.

At 16:59 11-6-03, you wrote:
Hello PHP List,

I would like to use links such as:

<a href="index.php?tablename=table">table</a>

The resulting page would have a line on it like such:

$query = "SELECT * FROM $table";

Is this possible? If so, is there maybe a better way to do this?

Also, is it possible to show the names of the tables in PHP page?

Thanks,

-Steve Marquez


-- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



Reply via email to