Re: [PHP-DB] PHP Bug handling Messages from MSSQL ?

2005-07-12 Thread Frank M. Kromann
Hi Denio, The function name should say it all, mssql_get_last_message() returns the last and only the last message from the server. I'll add an item on my todo list to implement a mssql_get_server_messages() function tal will allow you to get all messages from the previous mssql_query() call. This

[PHP-DB] PHP Bug handling Messages from MSSQL ?

2005-07-11 Thread Denio Mariz
Hello, I'm trying to build a demo of SQL Injection (SI) to discuss with my students. The idea is to use the live demo to show and discuss how to avoid SI using some secure code techiques. I'm using PHP 4.3.11 and MSSQL 80 on a windows XP box. Sometimes a multiline query is submitted to the ser