8 Jun
2006
8 Jun
'06
3:35 p.m.
On Thu, Jun 08, 2006 at 11:25:08AM -0400, Chris Morgan wrote:
$sQuery = "Select versionId from appVersion where appId='"$_REQUEST['appId']."';";
Who's '' around $_REQUEST should prevent the string from being interpreted as anything but a single value passed as the value of appId.
with appId="' or 1=1;'"?
--
cu