Leaderboard
Popular Content
Showing content with the highest reputation on 09/24/2020 in Posts
-
You are using the "keys" from the user submitted data as the field names in your query! DO NOT DO THIS! Never trust the data from the user. Just because you provided the field names in the form does not mean that the user will submit that back. The user could arbitrarily send any field names or even malicious SQL code to expose or corrupt your DB.1 point
This leaderboard is set to New York/GMT-04:00