G
$query = "SELECT *"И тогда если негодяй напишет SQL INJ, то увидит
. "\n FROM users"
. "\n WHERE id = " . $id
. "\n AND owner = 1"
. "\n ORDER BY name"
;
$database->setQuery( $query );
$rows = $database->loadObjectList();
You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%20FROM%20admins;--' at line 1 SQL=SELECT * FROM users WHERE id = 1%27%20SELECT%20*%20FROM%20admins;--


