New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SQL injection #1

Open

captn3m0 opened this issue Jun 9, 2014 · 1 comment

captn3m0 commented Jun 9, 2014

Directly using $_POST values as strings without escaping in SQL queries is the greatest security sin a developer can commit.

Learn to write secure code. See 1 and 2 on how to improve.

Owner

AvishekDe commented Jun 10, 2014

Yes sir, I know about this. But since the app is going to be used in a local environment, I did not bother to address the security issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment