I was looking for information about parameterized queries, the problem is that I cant find basic examples to follow in php.  Is this correct?  PHP   $email= $_POST["email"]; //or mysqli_real_escape_string($_POST["email"]);?   SQL    SET @email = '$email';  SELECT email FROM users WHERE email=@email   Whit this configuration would be enough to avoid sql injections?
If user input is inserted without modification into an SQL query, then the application becomes vulnerable to , like in the following example:  $unsafe_variable = $_POST['user_input'];   mysql_query("INSERT INTO `table` (`column`) VALUES ('$unsafe_variable')");   That's because the user can input something like value'); DROP TABLE table;--, and the query becomes:  INSERT INTO `table` (`column`) VALUES('value'); DROP TABLE table;--')   What can be done to prevent this from happening?
What is the term for the double consecutive use of a word with stress on one of the words to alter its severity? What is the term when a word is used consecutively twice, with intentional stress placed on the first word, as a means to alter the severity of the word's meaning?  I am not referring to a  (had had) or a  (that that), but to the slightly sarcastic use as demonstrated in shows like Seinfeld. Sample sentences, with emphasis:  I know we're going out to eat, but I am only going to pick at an appetizer because I'm not hungry hungry. Don't wear something so formal to the party; I don't think you need to be dressed dressed.  Of personal note, some of my relatives decided a few years ago to nick-name the term a &quot;Celaine&quot; (a combination of their names) due to their own frequent use of it. Note: This question explicitly requests the term of art used by linguists and English scholars when discussing this phenomenon. This question is different from a  which requests a historical explanation for the phenomenon described by this term. None of the answers to the suggested duplicate provide the term.  The author of the similar question requests the term for the pattern in a comment, but does not receive an acceptable answer. The only mention of an acceptable term is in a comment made by the author of this question, in response to the author of the similar question, directing back to this very question. I would like to connect a USB Mouse, Keyboard or Storage Device to my Nexus 4. So far I know, for this USB OTG must be supported. Unfortunately I can not find any actual information about this.  Does anybody know whether USB OTG is supported by Ubuntu-Touch? If yes, does anybody know if it would work with a Nexus 4 device? What do the fields in ls -al output mean? The ls -al command shows the following output;  -rwxrw-r--    10    root   root 2048    Jan 13 07:11 afile.exe   What are all the fields in the preceding display? A few years ago Umber Ferrule wrote that the toolbars in the taskbar are defined in   HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams.   This looks very plausible but cannot be the entire story.  Deleting this key will in no way affect the taskbar and on rebooting the system the key magically reappears.  Why do I want to know?  Simple.  I would like to export the key to a reg. file as a convenient backup. How can I calculate the R-squared of a regression with arima errors using R? If I have an arima object like a:  set.seed(100) x1 &lt;- cumsum(runif(100)) x2 &lt;- c(rnorm(25, 20), rep(0, 75)) x3 &lt;- x1 + x2  dummy = c(rep(1, 25), rep(0, 75))  a &lt;- arima(x3, order=c(0, 1, 0), xreg=dummy) print(a)   .  Series: x3  ARIMA(0,1,0)                      Call: arima(x = x3, order = c(0, 1, 0), xreg = dummy)   Coefficients:         dummy       17.7665 s.e.   1.1434  sigma^2 estimated as 1.307:  log likelihood = -153.74 AIC = 311.48   AICc = 311.6   BIC = 316.67   How do calculate the R squared of this regression? to set start Thunderbird in minimized mode at startup, but it wasn't helpful.   After following the instructions, I could not even start Thunderbird. So I was forced to start TB in safe mode to delete the "FireTray Plugin" and fix this issue. After that it started to work but it deleted all my email accounts and I had to do that chore all over again .  So is there any working way to start Thunderbird minimized on start-up? JavaScript private methods Can I use Named Credential merge fields as URL parameters on the endpoint? I have a named credential as follows:  Name   Test_Credential URL    https://www.somesite.com Identity Type    Named Principal Authentication Protocol    Password Authentication Username   foobar Password   mySomeSiteDeveloperKey Generate Authorization Header   FALSE Allow Merge Fields in HTTP Header    TRUE Allow Merge Fields in HTTP Body     TRUE   The service that I am trying to authenticate against uses URL parameters to pass in the developer key and username. Is there any way to use  to pass those in to the URL?   The Named Credential attributes seem not to get decoded until the request is actually sent, as debugging the endpoint, or headers if I set them per the linked doc, show the un-merged data. I can get the callout to go to the right place, and return the expected error because the auth information is not provided. Anybody know of a "show me my HTTP request" site that I could point to to get a better idea of how this works?  I've tried both of these:  req.setEndpoint('callout:Test_Credential/api/action?id={!$Credential.Password}&amp;account={!$Credential.UserName}');  req.setEndpoint('callout:Test_Credential/api/action' + '?id=' + '{!$Credential.Password}' + '&amp;account=' + '{!$Credential.UserName}');   (Edited to remove the part about $Credential vs. $Test_Credential as I was able to determine that it is the former, and see the merged creds by calling out to .) When is it correct to use "yourself" and "myself" (versus "you" and "me")? I'm confused by why people use the following:     It's up to yourself.   Rather than:     It's up to you.   Another example of this would be:     Please feel free to contact ourselves if you have any problems.   Rather than:     Please feel free to contact us if you have any problems.   Are both of these correct?  Is there any reason for using the former? I found Minecraft's marvelous large worlds extremely slow to navigate, even with a quad core and meaty graphics card.  I assume Minecraft's slowness comes from:   Java, as spatial partitioning and memory management are faster in native C++. Weak world partitioning.   I could be wrong on both assumptions. However, this got me thinking about the best way to manage large voxel worlds. As it is a true 3D world, where a block can exist in any part of the world, it is basically a big 3D array [x][y][z], where each block in the world has a type (i.e BlockType.Empty = 0, BlockType.Dirt = 1, etc.)  I assume that to make this sort of world perform well, you would need to:   Use a tree of some variety (//) to split all the cubes out; it seems like an oct/kd would be the better option, as you can just partition on a per cube level not a per triangle level. Use some algorithm to work out which blocks can currently be seen, as blocks closer to the user could obfuscate the blocks behind, making it pointless to render them. Keep the block object themselves lightweight, so it is quick to add and remove them from the trees.   I guess there is no right answer to this, but I would be interested to see peoples' opinions on the subject.  How would you improve performance in a large voxel-based world? How to read "service --status-all" results I need to identify the currently running services but I can't figure out the results of running service --status-all, I mean what does ?, - and + mean ?  $ service --status-all  [ + ]  acpid  [ + ]  anacron  [ + ]  apparmor  [ ? ]  apport  [ ? ]  atieventsd  [ + ]  avahi-daemon  [ ? ]  binfmt-support  [ + ]  bluetooth  [ - ]  brltty  [ + ]  console-font  [ + ]  console-setup  [ + ]  cron  [ + ]  cups  [ + ]  cups-browsed  [ - ]  dbus  [ ? ]  dns-clean  [ + ]  friendly-recovery  [ - ]  grub-common  [ ? ]  irqbalance  [ - ]  kerneloops  [ ? ]  killprocs  [ + ]  kmod  [ ? ]  lightdm  [ - ]  lm-sensors  [ ? ]  mysql  [ ? ]  networking  [ ? ]  ondemand  [ ? ]  pppd-dns  [ - ]  procps  [ - ]  pulseaudio  [ ? ]  rc.local  [ + ]  resolvconf  [ + ]  rfkill-restore  [ + ]  rfkill-store  [ - ]  rsync  [ + ]  rsyslog  [ + ]  saned  [ ? ]  sendsigs  [ + ]  setvtrgb  [ ? ]  speech-dispatcher  [ - ]  sudo  [ + ]  timidity  [ + ]  udev  [ ? ]  umountfs  [ ? ]  umountnfs.sh  [ ? ]  umountroot  [ - ]  unattended-upgrades  [ - ]  urandom  [ + ]  virtualbox  [ - ]  x11-common   And would running this command with sudo make any difference ? I tried it and in my case it didn't make any difference, but may it differ in other setups ? Does a subsequent charm effect override a previous one? In a recent session, I was confused about how multiple charm effects would interact with each other:  A vampire used its 'Charm' ability to charm a PC. It reads (paraphrased):     The target must succeed on a saving throw or be charmed by the vampire. It takes the vampire's requests in the most favourable way it can. It can repeat the saving throw if the vampire or its companions harm it. Otherwise, the effect last 24 hours or until the vampire is destroyed, is on another plane of existence, or takes a bonus action to end the effect.   Another PC then decided to attempt to wrest control back from the vampire by casting crown of madness on their friend. it reads (paraphrased):     The creature must succeed on a saving throw or be charmed. The charmed target must use its action before moving on each of its turn to make a melee attack against a creature other than itself that you mentally choose. The target can act normally on its turn if you choose no creature, or none are within its reach.   At the time, I ruled that both effects would take place simultaneously. This meant that Crown of Madness took effect first, and the vampire's charm afterwards.  Was this the correct ruling? Can a creature be charmed twice? Or does one charm effect override the other? Why doesn't the Java SDK installer set JAVA_HOME? I always wondered why I have to manually set the JAVA_HOME environment variable after installing the Java SDK.     JAVA_HOME=c:\Program Files\Java\jdk1.6.0_12   Visual Studio at least provides a batch file to set these kind of environment variables:     call "c:\Program Files\Microsoft Visual   Studio 9.0\VC\vcvarsall.bat"   Does Java have something similar? I'm trying to make a build script that should simply work after installing the Java SDK. I don't want people to mess with environment variables on their PC. Having a UV maping problem, does anyone know what this is, and how to fix it? When to use (and not use) the rule of three Virtualbox has no 64-bit options Loopback to forwarded Public IP address from local network - Hairpin NAT ggplot2: facet_wrap strip color based on variable in data set The usual explanation for warm fluids rising past cooler ones is that the warmer fluid has a lower density.  I'm trying to understand what this looks like at a molecular scale.  The density seems to be a large-scale phenomenon, and I don't understand how it can affect whether a particular molecule rises or falls.  Consider a cylinder of fluid that is being heated at the bottom.  The molecules at the bottom have a higher average energy.  How does this result in the tendency of the warmer molecules at the bottom to move upwards past the cooler ones? I'd like to know your opinion on citations in abstracts. At my university, there is no rule on that matter so it's basically a question of preference.  Do you think it's okay to have citations in an abstract or do you  personally prefer to have the abstract be a ``stand-alone'' piece of  work?