SQL injection - Githubissues

AvishekDe / GTZorganizer

An Application for handling logistics during the GTz tournament

0 stars 0 forks source link

Open captn3m0 opened 10 years ago

captn3m0 commented 10 years ago

Directly using $_POST values as strings without escaping in SQL queries is the greatest security sin a developer can commit.

Learn to write secure code. See 1 and 2 on how to improve.

AvishekDe commented 10 years ago

Yes sir, I know about this. But since the app is going to be used in a local environment, I did not bother to address the security issues.