Re: I'm completely lost here

From: Date: Sat, 25 Aug 2012 01:47:28 +0000
Subject: Re: I'm completely lost here
References: 1 2 3  Groups: php.db 
Request: Send a blank email to php-db+get-48430@lists.php.net to get a copy of this message
On Friday, August 24, 2012 09:27:31 PM Gary Chambers wrote: > David, > > > Just did that like Richard had suggested also and I do get the expected > > results. I suspect I need to put the same thing in my query correct? like > > this: > > > > mysql_query ("INSERT INTO inventory(image, year, make, model, > > milage, price)VALUES($_POST['image'], $_POST['year'], > > $_POST['make'], > > $_POST['model'], $_POST['milage'] , $_POST['price'])"); > > I might be stating the obvious here, but you should really validate your > input. If this is just an exercise or a simple test, that will work. If > it's an application that, especially, is accessible on the internet, you > definitely need to validate and ensure that you're receiving sane input. Yes this is just pretty much a refresher. Validation and sanatizing is my next quest :-) I got it, thanks to everyone pointing me in the right direction. It has been a while since I've written any PHP code and I started last week just to freshen up and try and learn more. I guess the last time I had written any forms, register_globals was on. (Long time!) LOL anyway I changed my code to this: Cut it down to just 1 row & snipped the other stuff. :-) mysql_query ("INSERT INTO inventory(image)VALUES('$_POST[image]')"); Thanks for pointing me in the right direction I appreciate it. David M.

« previous php.db (#48430) next »