[linux] Apache, PHP a MySQL

[Matus "fantomas" Uhlar]

-> <?php
-> require("./function.php");
-> 
-> if(!isset($count)){
-> 	$sql	=	@mysql_query("UPDATE counter SET hits=(hits+1) WHERE
-> (id='1')", $conn);

je dost mozne ze z PHP nepreslo prihlasenie sa do databazy. dovod moze byt
neznamy/nepovoleny pouzivatel - ked to spustat rucne ako user sa pouzije
tvoj login, ked to spustas z apache pouzije sa user pod ktorym bezi apache a
toho mysql nepusti... 


-> a takto vyzera function.php
-> 
-> <?php
-> $conn	= mysql_pconnect("localhost", "", "");
-> 		  mysql_select_db("tatrasoft");
-> 		  
-> function Cislo($n){
-> 	return Number_Format($n, 0, " ", " ");
-> }
-> ?>

nekontrolujes vystup funkcii - implicitne predpokladas ze vsetko ide ako po
masle. A ked nejde, nemas tu moznost to detekovat...

-- 
 Matus "fantomas" Uhlar, uhlar na fantomas.sk ; http://www.fantomas.sk/
 Warning: I don't wish to receive spam to this address.
 Varovanie: Nezelam si na tuto adresu dostavat akukolvek reklamnu postu.
 42.7 percent of all statistics are made up on the spot.