sql injection example

Asked Jan 25 '13 at 05:09

Active Jan 25 '13 at 05:11

Viewed 54 times

Possible Duplicate:
How to prevent SQL injection in PHP?

I'm newer in sql and I would like to learn about SQL Injection. For example, I have a simple sql query like using POST (php):

    $valuedata = $_POST['name1'];
    $dbase->query("SELECT * FROM tabledata WHERE value LIKE '%$valuedata%'");

How to protect this query of SQL Injection?

edited May 23 '17 at 11:56

Community

asked Jan 25 '13 at 05:09

John Smith

Take a look at prepared statements and parameterized queries. – lc. Jan 25 '13 at 05:10
$_POST['name1'] = "'; DROP TABLE users;" – Nemoden Jan 25 '13 at 05:11
1

If possible, give me a simple example for my query, please in php language – John Smith Jan 25 '13 at 05:11
$valuedata = mysql_escape_string($_POST['name1']); $dbase->query("SELECT * FROM table1 WHERE value LIKE '%$valuedata%' LIMIT 1"); Please control me, is it true? – John Smith Jan 25 '13 at 05:22

0 Answers0