Re: [GENERAL] problem with single quote in postgres 8.3.5

2009-03-07 Thread David Fetter
On Sat, Mar 07, 2009 at 05:53:21AM -0800, hugocoolens wrote: > I have a little php-script to help me learn foreign languages > In my php-code I have the following line: > $query="update wordlist set known=true where dutch='".$preceding."'"; With this kind of line, you are inviting an SQL injectio

Re: [GENERAL] problem with single quote in postgres 8.3.5

2009-03-07 Thread Raymond O'Donnell
On 07/03/2009 13:53, hugocoolens wrote: > I have a little php-script to help me learn foreign languages > In my php-code I have the following line: > $query="update wordlist set known=true where dutch='".$preceding."'"; > > This worked fine on a system running postgres 8.1, however in version > 8

[GENERAL] problem with single quote in postgres 8.3.5

2009-03-07 Thread hugocoolens
I have a little php-script to help me learn foreign languages In my php-code I have the following line: $query="update wordlist set known=true where dutch='".$preceding."'"; This worked fine on a system running postgres 8.1, however in version 8.3.5 something changed which makes records with the