in reply to DBI & MySQL Login Test
I can help you learn a painful lesson. Make this your next username: Robert'); DROP TABLE Users; --.
The actual problem in your code is the single quotes. They make the $ literal so the variable is not interpolated. Next to address the bigger problem with little Bobby Tables above, read the stuff on placeholders in the DBI docs. You should *never* do SQL like your example. The docs, and any number of nodes here, will explain why in detail.
|
|---|
| Replies are listed 'Best First'. | |
|---|---|
|
Re^2: DBI & MySQL Login Test
by quester (Vicar) on Aug 25, 2009 at 10:40 UTC |