in reply to Re: Untaint variables not working, IF statements.
in thread Untaint variables not working, IF statements.

I don't understand what the '?' if for in the following statement: "SELECT DISTINCT city FROM database WHERE state = ? ORDER + BY city"

Why wouldn't you just use '$state'?

Thanks
Adam

  • Comment on Re^2: Untaint variables not working, IF statements.