MySQL Escaping an Integer
#4

Quote:
Originally Posted by PrO.GameR
Посмотреть сообщение
Escaping is used so people aren't able to alter your query to do what they want (for example tell mysql to drop table 'players' that you keep your information in), they can't do it with 1 integer (Since mysql commands are all at least words, like UPDATE ALTER DROP INSERT) therefore there is no need to do such thing.
This is why I said I felt it was not necessary to do, I'm aware of what escaping the string did, and I was racking my brain to try and think of any potential way someone could alter a query with just a number but couldn't think of one. I always ask the community though JUST incase I never thought of something so obvious...

Thanks guys
Reply


Messages In This Thread
MySQL Escaping an Integer - by LiamM - 28.09.2015, 21:53
AW: MySQL Escaping an Integer - by Kaliber - 28.09.2015, 22:06
Re: MySQL Escaping an Integer - by PrO.GameR - 28.09.2015, 22:10
Re: MySQL Escaping an Integer - by LiamM - 28.09.2015, 22:44

Forum Jump:


Users browsing this thread: 2 Guest(s)