Re: Scripting Languages and Secure Coding + code

[Jeremy Thibeaux <jeremy.thibeaux () lucidfactory com>]

> Hey, if you're using SQL there, the user may just
> enter '%' or any other 
> wilcard char, which makes it a lot easier.

Hmm...I thought % or other wildcards only applied when
LIKE was being used.  Of course, that does bring up an
important point.  If you are looking for an exact
match, NEVER use LIKE to do the comparison.
 
Jeremy Thibeaux
Lucid Factory, inc.