[ILUG] injection attacks [was "php"]

[Kae Verens]

Bryan O'Donoghue wrote:

>> But - using multiple statements in single calls is an invitation for
>>injection attacks. 
>>    
>>
>
>How so ?
>
>Once you validate your user input doesn't have SELECT, "DELETE"...
>INSERT DROP or other harmful statments.... how does it make a difference
>*how many* statments in the one execute operate on this data ?
>  
>

I should have used the word "allowing" instead of "using".

We're all only human - given the chance to make a mistake, most of us 
will make a mistake at least once. If the language doesn't allow you to 
make that mistake (by enforcing single calls), then that's a definite 
plus in my book.

Kae