Re: [PHP] When did mysql_query quit allowing multiple queries separated by a semicolon

2004-06-03 Thread Marek Kilimajer
James Harrell wrote: Hi PHP gurus, Asked this question on the PHP-DB list, no response there. Hoping someone here may have the answer. :) Mostly a research question. I recall (a long time ago - php3?) that some php packages could be compromised by injecting a secondary query though GET/POST varia

Re: [PHP] When did mysql_query quit allowing multiple queries separated by a semicolon

2004-06-03 Thread John W. Holmes
From: "James Harrell" <[EMAIL PROTECTED]> > Mostly a research question. I recall (a long time ago - php3?) that > some php packages could be compromised by injecting a secondary query > though GET/POST variables when they were not properly sanitized. > > ex: > $query="select a from $b"; > mysql_qu

[PHP] When did mysql_query quit allowing multiple queries separated by a semicolon

2004-06-03 Thread James Harrell
Hi PHP gurus, Asked this question on the PHP-DB list, no response there. Hoping someone here may have the answer. :) Mostly a research question. I recall (a long time ago - php3?) that some php packages could be compromised by injecting a secondary query though GET/POST variables when they were