Made the webshop 'safer'
This commit is contained in:
1 parent
c9db321a9a
commit
398634668a
1 file changed
+2
-1
@@ -59,7 +59,8 @@ $connection = mysql_connect('localhost', 'webshop', 'pass')
|
||||
$db = mysql_select_db('webshop_sql1', $connection)
|
||||
or die('Could not select database');
|
||||
|
||||
$query = 'SELECT naam, afbeelding, beschrijving, prijs FROM producten WHERE id = ' . $_GET['id'];
|
||||
$query = 'SELECT naam, afbeelding, beschrijving, prijs FROM producten WHERE id = ' . mysql_real_escape_string($_GET['id']);
|
||||
|
||||
$result = mysql_query($query)
|
||||
or die('<div class="alert alert-danger">Query error: <pre>' . mysql_error() . '</pre>Query: <code>' . $query . '</code> </div>');
|
||||
|
||||
|
||||
Reference in new issue
Block a user