query: is my php code vulnerable to sql injections
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 24958
negative_passages.text: Getting raw SQL query string from PDO prepared statements
negative_passages.docid: 115240
negative_passages.text: How do I test an application for SQL injections?
negative_passages.docid: 122995
negative_passages.text: PHP and Postgres: catching errors?
negative_passages.docid: 46503
negative_passages.text: Do htmlspecialchars and mysql_real_escape_string keep my PHP code safe from injection?
negative_passages.docid: 13546
negative_passages.text: Correct way to use LIKE '%{$var}%' with prepared statements? [mysqli]
negative_passages.docid: 103874
negative_passages.text: Warning: mysqli_stmt::bind_result(): Number of bind variables doesn't match number of fields in prepared statement error
negative_passages.docid: 17498
negative_passages.text: PHP parse/syntax errors; and how to solve them
negative_passages.docid: 13458
negative_passages.text: How can I sanitize user input with PHP?
negative_passages.docid: 55886
negative_passages.text: SOQL Injection Prevention
negative_passages.docid: 3705
negative_passages.text: How can I prevent SQL injection with dynamic tablenames?
negative_passages.docid: 157148
negative_passages.text: What are the valid characters in PHP variable, method, class, etc names?
negative_passages.docid: 62437
negative_passages.text: How do I safely "eval" user code in a webpage?
negative_passages.docid: 39060
negative_passages.text: Classic ASP SQL Injection Protection
negative_passages.docid: 44264
negative_passages.text: identify and execute php code on a string
negative_passages.docid: 156732
negative_passages.text: Using wildcards in prepared statement - MySQLi
negative_passages.docid: 60295
negative_passages.text: Script breaking below MySQL queries, but no error being given?