File tree Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -236,7 +236,7 @@ the following very common SQL statement:
236
236
SELECT * FROM articles WHERE id IN (?)
237
237
238
238
Since you are using an ``IN `` expression you would really like to use it in the following way
239
- (and I guess everybody has tried to do this once in his life, before realizing it doesn't work):
239
+ (and I guess everybody has tried to do this once in their life, before realizing it doesn't work):
240
240
241
241
.. code-block :: php
242
242
Original file line number Diff line number Diff line change @@ -63,7 +63,7 @@ SQL or DQL query. For Example:
63
63
// Very wrong!
64
64
$sql = "SELECT * FROM users WHERE name = '" . $_GET['username']. "'";
65
65
66
- An attacker could inject any value into the GET variable "username" to modify the query to his needs.
66
+ An attacker could inject any value into the GET variable "username" to modify the query to their needs.
67
67
68
68
Although DQL is a wrapper around SQL that can prevent some security implications, the previous
69
69
example is also a threat to DQL queries.
You can’t perform that action at this time.
0 commit comments