Re: Weird Wildcard Search

Hi Lutz, Thanks for your suggestions. I am using the combination of urlencode/urldecode and addslashes/stripslashes.

echo " <a href=\"sresults.php3?sqlstmt=$sqlstmt&CR=$CR&RL=$y\">[Next]</a>"; Doing $sqlstmt = urlencode($sqlstmt) befor this echo protects the variable in the url.

Other user pointed out a potential danger... some clown putting DELETE * FROM TABLE in the SQL stmt. Anyway, I have changed it to pass only the variable. It was never my intention to have a full SQL stmt. I was trying to find a solution and was hoping by echoing the full SQL stmt will give me a better picture. Phew.. if I have implemented it with the SQLstmt then I will be in BIG trouble... :):) Thanks guys...