TalkPHP - View Single Post - How to Login to Any Account on an Insecure Site

Tanax · 09-20-2007, 07:01 AM

PHP Code:


			
$pass = mysql_escape_string($_POST['pass']);
$sql = printf("SELECT `pass` FROM `users` WHERE `pass` = %s", $pass);
$query = mysql_query($sql);

That would be pretty foolproof?

Anything else that I can add to make it safer?

09-20-2007, 07:01 AM	#5 (permalink)
Tanax The Prestige Join Date: Sep 2007 Location: Sweden, Stockholm Posts: 1,079 Thanks: 115	PHP Code: $pass = mysql_escape_string($_POST['pass']); $sql = printf("SELECT `pass` FROM `users` WHERE `pass` = %s", $pass); $query = mysql_query($sql); That would be pretty foolproof? Anything else that I can add to make it safer?