[PHP] Re: Selecting a special row from the database

2007-05-08 Thread Marcelo Wolfgang
Wow, Thanks for all the ideas, I'll explore all of them. I have the content people messing with the adm so it's hard to try things I don't fully understand by now About the sql injection, the db user I set for this has only select privileges, should I be worried even with this ? Thanks

RE: [PHP] Re: Selecting a special row from the database

2007-05-08 Thread Jim Moseby
About the sql injection, the db user I set for this has only select privileges, should I be worried even with this ? Absolutely. If I have select privs, I could possibly select passwords, credit card numbers, or whatever else sensitive info you have in your db. JM -- PHP General

Re: [PHP] Re: Selecting a special row from the database

2007-05-08 Thread Richard Lynch
On Tue, May 8, 2007 6:54 am, Marcelo Wolfgang wrote: About the sql injection, the db user I set for this has only select privileges, should I be worried even with this ? Only if you care about somebody constructing a query that snarfs down your entire database so they can steal it... Or if you