justAnoob Posted May 16, 2009 Share Posted May 16, 2009 <?php $sql = "DELETE * FROM xxxxxx WHERE id = '$variable'"; $result = mysql_query($sql); ?> If a user has the ability to click on a button to delete a record, is there such a thing as having an unsecure php file that does the deletion??? What should I look for??? Quote Link to comment Share on other sites More sharing options...
Ken2k7 Posted May 16, 2009 Share Posted May 16, 2009 SQL injection. Quote Link to comment Share on other sites More sharing options...
ldougherty Posted May 16, 2009 Share Posted May 16, 2009 A good tutorial that should help you out.. http://www.tizag.com/mysqlTutorial/mysql-php-sql-injection.php Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.