CarltonOne Engagement interview question

$sql = "SELECT * FROM table as a WHERE a.id ={ $id }"; What is wrong with the code ?

Interview Answer

Anonymous

5 Nov 2018

SQL Injection vulnerability with $id.