Tag: mariadb

Is it safe to use the name of a table as a parameter of a php function?

The function searches the $variable named table using SQL as showed here: class Search{ `public function query(){` `SELECT * FROM $tableName` `}` } $object = new Search(); $object-&…