RE: [PHP-DB] using query_strings in sql
| From: | Matt Matijevich | Date: | Wed, 21 Jan 2004 20:53:19 +0000 |
| Subject: | RE: [PHP-DB] using query_strings in sql | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-32563@lists.php.net to get a copy of this message | ||
<snip>
WHAT DOESN'T HAPPEN is that the query_string values DO NOT trump the
default
variables.
so query_string = ?class=X§ion=Y&order=ASC
I can't input these variables : $class,$section,$order into the SQL
statement
SELECT *
FROM classes
WHERE section=$section
ORDER BY $class $order
</snip>
I am getting in really late in this disussion so I apologize if I am
off base here but if you have register_globals off
$section, $class, and $order wont get set.
try this:
$section = $_GET['section'];
$class = $_GET['class'];
$order = $_GET['order'];