This site uses cookies and similar technologies.

If you don't change browser settings, you agree to it.

I understand
2 Posts
ostap007
21 days ago
0
Topic

Hello!

I use a field "Search Query".

In SQL query I use constructs like: "$uri - >getValue ('url_variable')", i.e. I take values of attributes of their URL

Question:

Is there a danger of "SQL-Injection" in this case, maybe it has already been solved at the level of field logic? Is it necessary to provide something in the SQL query itself?

Get a Book for SEBLOD