Re: [PHP] When did mysql_query quit allowing multiple queries separated by a semicolon

2004-06-03 Thread John W. Holmes
From: James Harrell [EMAIL PROTECTED] Mostly a research question. I recall (a long time ago - php3?) that some php packages could be compromised by injecting a secondary query though GET/POST variables when they were not properly sanitized. ex: $query=select a from $b; mysql_query($query);

Re: [PHP] When did mysql_query quit allowing multiple queries separated by a semicolon

2004-06-03 Thread Marek Kilimajer
James Harrell wrote: Hi PHP gurus, Asked this question on the PHP-DB list, no response there. Hoping someone here may have the answer. :) Mostly a research question. I recall (a long time ago - php3?) that some php packages could be compromised by injecting a secondary query though GET/POST