Rule Definition
A query that retrieves all columns of a table with a SELECT * can potentially be the source of important performance problems: Such performance problems may arise when the execution of the query returns a large result sets (many row with all the columns may then become a huge amount of data to transport over the network). Thus optimzer module can't provide a correct execution. Also, when using such queries, one cannot control how the columns will be ordered and returned to the client. This can lead to important data inconsistencies and thus stability issues.

Remediation
Limit the columns in your SQL select statements to those applications really needing it.

Violation Code Sample

<?php
$query = "select name, family_name, age from employee;";
?>

Fixed Code Sample

<?php
$query = "select name, family_name, age from employee;";
      ?>