Forum Moderators: coopster

Message Too Old, No Replies

Select *

         

Pico_Train

3:21 pm on Apr 20, 2009 (gmt 0)

10+ Year Member



I'm about to start a new site.

I would like to just select content using select * .

Is that an issue security wise?

The site will have a user's area where they can submit content after logging, I will use CHAP auth if that has anything to do with the above...

Thanks!

bkeep

4:14 pm on Apr 20, 2009 (gmt 0)

10+ Year Member



As long as you are sanitizing your user input used for queries it shouldn't be a problem.

If you only need one column worth of data though you shouldn't use *
So if I only wanted shoe size for anyone wearing Nikes
SELECT size FROM table WHERE brand = 'nike'

Pico_Train

5:37 am on Apr 21, 2009 (gmt 0)

10+ Year Member



Yeah cool. Am sanitizing user input yes.