This is a discussion on Re: $_POST in MySQL query issue... within the PHP General forums, part of the PHP Programming Forums category; I concur, assign the superglobal array to a variable ... $table= 'elements'; $Name = mysql_escape_string($_POST['elementName']); $sql = "INSERT INTO $table ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I concur, assign the superglobal array to a variable ...
$table= 'elements'; $Name = mysql_escape_string($_POST['elementName']); $sql = "INSERT INTO $table SET Name= '$Name'"; .... then use that opportunity to run a check on the output. -- Jon Kriek http://phpfreaks.com |
![]() |
| Thread Tools | |
| Display Modes | |
|
|