mysql_connect - connects to MySQL server
mysql_select_db - select database
mysql_query - send query
mysql_num_fields - get number of fields
mysql_fetch_field - get field information
mysql_query - send query
mysql_fetch_row - get current row from result table
mysql_free_result - free result table from memory
Typical SQL injection happens when user input is not filtered for escape characters and is then passed into a SQL statement. This results in the potential manipulation of the statements performed on the database by the end user of the application.
Most interactive websites nowadays require data to be presented dynamically and interactively based on input from the user. For example, a customer may need to log into a retail website to check his purchasing history. In this instance, the website would have stored two types of data in order for the customer to perform the check ? the customer?s personal login details; and the customer?s purchased items. This data can be stored in two types of storage ? flat files or databases.
Joining mailing list will entitle you
to receive occasional emails informing you of news and
updates to the site and any special offers that may be
of interest to you.