Re: Select and $_POST

[Terence <terencel@xxxxxxxxxxxxx>]

Ross wrote:
> What is the correct syntax for
>
> $query = "SELECT * FROM login where username='$_POST['username']' AND pass 
> ='$_POST['pass']'";
>
>
> Thought this would work.
>
> R. 
Search for "SQL Injection" and see why what you're doing is very 
dangerous. Google is your friend.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php