source code test

Exhibit A:

mysqli_query ( $dbh, "SELECT * FROM `table`;DELETE FROM `table` WHERE 1;" );

Exhibit B:

1420
1421

/* remove some insecure options */
flags ^= CLIENT_MULTI_STATEMENTS;   /* don't allow multi_queries via connect parameter */

Exhibit C:

mysqli_real_connect ( $link, $host, $username, $password, NULL, NULL, NULL, CLIENT_MULTI_STATEMENTS );