Skip to content
Projects
Groups
Snippets
Help
Loading...
Help
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
D
doctrine-dbal
Project
Project
Details
Activity
Releases
Cycle Analytics
Repository
Repository
Files
Commits
Branches
Tags
Contributors
Graph
Compare
Charts
Issues
0
Issues
0
List
Boards
Labels
Milestones
Merge Requests
0
Merge Requests
0
CI / CD
CI / CD
Pipelines
Jobs
Schedules
Charts
Wiki
Wiki
Snippets
Snippets
Members
Members
Collapse sidebar
Close sidebar
Activity
Graph
Charts
Create a new issue
Jobs
Commits
Issue Boards
Open sidebar
Tomáš Trávníček
doctrine-dbal
Commits
0c408469
Commit
0c408469
authored
Oct 27, 2011
by
Andreas Fischer
Browse files
Options
Browse Files
Download
Email Patches
Plain Diff
Remove double reference to 'SQL query'.
parent
4c7ad891
Changes
1
Hide whitespace changes
Inline
Side-by-side
Showing
1 changed file
with
1 addition
and
1 deletion
+1
-1
data-retrieval-and-manipulation.rst
en/reference/data-retrieval-and-manipulation.rst
+1
-1
No files found.
en/reference/data-retrieval-and-manipulation.rst
View file @
0c408469
...
@@ -49,7 +49,7 @@ The query method is the most simple one for fetching data, but it also has
...
@@ -49,7 +49,7 @@ The query method is the most simple one for fetching data, but it also has
several drawbacks:
several drawbacks:
- There is no way to add dynamic parameters to the SQL query without modifying
- There is no way to add dynamic parameters to the SQL query without modifying
the SQL query (``$sql``)
itself. This can easily lead to a category of security
``$sql``
itself. This can easily lead to a category of security
holes called **SQL injection**, where a third party can modify the SQL executed
holes called **SQL injection**, where a third party can modify the SQL executed
and even execute their own queries through clever exploiting of the security hole.
and even execute their own queries through clever exploiting of the security hole.
- **Quoting** dynamic parameters for an SQL query is tedious work and requires lots
- **Quoting** dynamic parameters for an SQL query is tedious work and requires lots
...
...
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment