hey friends my url give this error
SELECT * FROM news_mgt WHERE news_status = 1 and del_status = 0 and id = 38\'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1
when i use sql injection in my site.....
i search in google but dnt get where is error....
plz short out this .....
sql is
DROP TABLE IF EXISTS `news_mgt`;
CREATE TABLE `news_mgt` (
`id` int(11) NOT NULL auto_increment,
`title` varchar(100) NOT NULL,
`description` text NOT NULL,
`news_status` int(11) NOT NULL default '1',
`news_date` date NOT NULL,
`del_status` tinyint(4) NOT NULL default '0',
PRIMARY KEY (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=40 DEFAULT CHARSET=latin1;
thanks !
SELECT * FROM news_mgt WHERE news_status = 1 and del_status = 0 and id = 38\'You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '\'' at line 1
when i use sql injection in my site.....
i search in google but dnt get where is error....
plz short out this .....
sql is
DROP TABLE IF EXISTS `news_mgt`;
CREATE TABLE `news_mgt` (
`id` int(11) NOT NULL auto_increment,
`title` varchar(100) NOT NULL,
`description` text NOT NULL,
`news_status` int(11) NOT NULL default '1',
`news_date` date NOT NULL,
`del_status` tinyint(4) NOT NULL default '0',
PRIMARY KEY (`id`)
) ENGINE=MyISAM AUTO_INCREMENT=40 DEFAULT CHARSET=latin1;
thanks !
Comment