New answers tagged ajax
0
PHP
This code is wide-open to SQL injection attacks. User input should be sanitized as supplied to the query using parameters (e.g. with mysqli_prepare() and bind_param()).
Instead of using a while loop with mysqli_fetch_assoc() just to push into an array, use mysqli_fetch_all() to get an array with one call.
Additionally, the SQL query selects all fields ...
Top 50 recent answers are included
