Content deleted Content added
Fixed syntax errors in sql injection code. |
Fixed var name $id |
||
Line 139:
query = "SELECT x, y, z FROM Table WHERE id='$id' "
</source>
If ''$id'' is replaced with ''"'; DELETE FROM Table; SELECT * FROM Table WHERE id='"'', executing this query will wipe out all the data on the local machine.
== See also ==
| |||