| Re: Auditing Code (security wise) |
Subject: Re: Auditing Code (security wise) by Dave_L on 2007/12/10 12:27:19 I don't think queryf bypasses the text sanitizer; it just allows non-SELECT queries, such as UPDATE and INSERT, to be done when processing a GET request. But I agree that queryf should only be used in special situations when it's really needed. |
ImpressCMS is a multi-language content management system for the web. It is community-built, an open source project and based on the common web technologies of PHP and MySQL.
More information
