Closed ssaamm closed 9 years ago
We said we'd do this in the conceptual design report. I personally think this is a janky way to do this. Users' actions shouldn't result in a new table being created.
This code is vulnerable to SQL injection. As far as I can tell, the PDO API doesn't have a way to escape user input in table creation statements (most likely because user input shouldn't be in table creation statements).
We decided this was dumb.
Includes: