Click here to Skip to main content
15,789,698 members
Home / Discussions / Linux, Apache, MySQL, PHP
   

Linux, Apache, MySQL, PHP

 
AnswerRe: i have this errors in my project please i need help Pin
Richard Deeming24-Mar-21 23:12
mveRichard Deeming24-Mar-21 23:12 
QuestionHow can I echo the numbers using list() function in foreach loop? Pin
Best Tutor24-Feb-21 10:33
Best Tutor24-Feb-21 10:33 
QuestionRe: How can I echo the numbers using list() function in foreach loop? Pin
Richard MacCutchan24-Feb-21 22:56
mveRichard MacCutchan24-Feb-21 22:56 
QuestionHow to import csv using php code Pin
Mohammed Hudair16-Feb-21 7:24
Mohammed Hudair16-Feb-21 7:24 
QuestionHow to code login page in html css php Pin
Member 150661826-Feb-21 2:01
Member 150661826-Feb-21 2:01 
AnswerRe: How to code login page in html css php Pin
Richard MacCutchan6-Feb-21 2:27
mveRichard MacCutchan6-Feb-21 2:27 
QuestionPosting dropdown value to database Pin
Member 1505550825-Jan-21 3:27
Member 1505550825-Jan-21 3:27 
AnswerRe: Posting dropdown value to database Pin
Richard Deeming25-Jan-21 5:04
mveRichard Deeming25-Jan-21 5:04 
If the user can have any influence over the bruggernavn or id session variables, or the content of the navn column, then your queries will be vulnerable to SQL Injection[^]. NEVER use string concatenation to build a SQL query. ALWAYS use a parameterized query.

PHP: SQL Injection - Manual[^]


If they can influence the navn column, there's also a danger of a persisted cross-site scripting vulnerability, since you don't properly encode the output.
Cross Site Scripting (XSS) | OWASP[^]


Beyond that, you're setting the shoes column to the $getSko variable, which is the object returned by your mysql_query call. I suspect you wanted to set it to the $_POST['sko'] value instead.



"These people looked deep within my soul and assigned me a number based on the order in which I joined."
- Homer

GeneralRe: Posting dropdown value to database Pin
Member 1505550825-Jan-21 7:31
Member 1505550825-Jan-21 7:31 
GeneralRe: Posting dropdown value to database Pin
Richard Deeming25-Jan-21 22:28
mveRichard Deeming25-Jan-21 22:28 
GeneralRe: Posting dropdown value to database Pin
Member 1505550825-Jan-21 22:57
Member 1505550825-Jan-21 22:57 
GeneralRe: Posting dropdown value to database Pin
Richard Deeming25-Jan-21 23:36
mveRichard Deeming25-Jan-21 23:36 
GeneralRe: Posting dropdown value to database Pin
Member 1505550825-Jan-21 23:58
Member 1505550825-Jan-21 23:58 
GeneralRe: Posting dropdown value to database Pin
Richard Deeming26-Jan-21 3:10
mveRichard Deeming26-Jan-21 3:10 
GeneralRe: Posting dropdown value to database Pin
Member 1505550826-Jan-21 4:27
Member 1505550826-Jan-21 4:27 
GeneralRe: Posting dropdown value to database Pin
jsc4226-Jan-21 4:40
professionaljsc4226-Jan-21 4:40 
GeneralRe: Posting dropdown value to database Pin
Richard Deeming26-Jan-21 4:44
mveRichard Deeming26-Jan-21 4:44 
QuestionHTML Form...Submit to E-Mail Pin
Member 149874928-Nov-20 21:04
Member 149874928-Nov-20 21:04 
QuestionCan't import pfx. Pin
ArturNoubel3-Nov-20 9:27
ArturNoubel3-Nov-20 9:27 
AnswerRe: Can't import pfx. Pin
Richard MacCutchan2-Nov-20 4:18
mveRichard MacCutchan2-Nov-20 4:18 
GeneralRe: Can't import pfx. Pin
ArturNoubel3-Nov-20 8:54
ArturNoubel3-Nov-20 8:54 
QuestionEquation of the third degree Pin
Member 1496562714-Oct-20 15:50
Member 1496562714-Oct-20 15:50 
AnswerRe: Equation of the third degree Pin
Richard MacCutchan14-Oct-20 23:37
mveRichard MacCutchan14-Oct-20 23:37 
AnswerRe: Equation of the third degree Pin
ZurdoDev15-Oct-20 2:17
professionalZurdoDev15-Oct-20 2:17 
Questionscreen with error in displaying the data, sql code does not work Pin
mynameyugioh21-Aug-20 14:38
mynameyugioh21-Aug-20 14:38 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.