http://www.perlmonks.org?node_id=986105


in reply to Help with searching within range of days

Allowing the information to be passed from the form will likely enable SQL injection.

Using an SP would be more secure, especially as it can use a host variable and avoid dynamic SQL.

  • Comment on Re: Help with searching within range of days