W3C ajax examples

[Cardale]

Has anyone noticed any problems with these examples?

 

http://www.w3schools.com/PHP/php_ajax_database.asp

 

I guess if you ignore any of the PHP code is what I'm talking about.  The ajax itself.

[PFMaBiSmAd]

The example at that link works for me in the latest FF and IE browsers.

 

If you are having a problem with the code, you would need to be way more specific about the symptoms or errors you are getting for anyone to be able to help you.

[Cardale]

Oh it wasn't that I was getting errors I was wondering security wise.  I am not far into ajax and I was curious.

[oni-kun]

Oh it wasn't that I was getting errors I was wondering security wise.  I am not far into ajax and I was curious.

 

$q=$_GET["q"];

$con = mysql_connect('localhost', 'peter', 'abc123');
if (!$con)
  {
  die('Could not connect: ' . mysql_error());
  }

mysql_select_db("ajax_demo", $con);

$sql="SELECT * FROM user WHERE id = '".$q."'";

 

Open to injection, Dunno why it doesn't tell you to sanitize input, but security wise AJAX should be as secure as you make the backend (PHP).

[Cardale]

Alright thanks.

[trq]

[ot]

w3schools has nothing at all to do with the w3c

[/ot]