mirror_php/pouet.net
1
0
Fork 0
mirror of https://github.com/psenough/pouet.net.git synced 2025-01-29 02:47:53 +01:00
Code Issues Projects Releases Wiki Activity

SQL injection

Browse Source
This commit is contained in:
Gargaj 2013-05-07 23:15:46 +03:00
parent 3cb8274b88
commit b0a54dd74e
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
stat_avatar.php
View File

@ -4,7 +4,7 @@ require("include/top.php");
<table bgcolor="#000000" cellspacing="1" cellpadding="3" border="0">
<?
if ($_GET["avatar"]) {
$sql = "SELECT avatar, id, nickname FROM users WHERE BINARY avatar = '".$_GET["avatar"]."'";
$sql = "SELECT avatar, id, nickname FROM users WHERE BINARY avatar = '".mysql_real_escape_string($_GET["avatar"])."'";
$r = mysql_query($sql);
while ($o = mysql_fetch_object($r)) {
?>