in reply to Re (3): Magical SQL
in thread Magical SQL
The __date_ge was born as solution for this problem:
in too many cases using just "field=value" insufficient, we need also "field<=value", "field > DATE_SUB(NOW(), INTERVAL value)" ans so on. But accepting plain SQL from user this way:
script.cgi?field=>5
is too insecure.
So, we still looking for more simple solution for this! And this is a main reason to post here.
|
|---|