Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : use of sprintf via a %s with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : interpretation with simple quote

Safe sample input : Get a serialize string in POST and unserialize it sanitize : use mysql_real_escape_string via an object construction : concatenation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : use of sprintf via a %s with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : interpretation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : concatenation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : use of sprintf via a %s with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : interpretation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : concatenation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : use of sprintf via a %s with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : interpretation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : concatenation with simple quote

Unsafe sample input : Get a serialize string in POST and unserialize it SANITIZE : use of pg_escape_string construction : use of sprintf via a %s with simple quote