Re: $_POST in MySQL query issue...
| From: | Jon Kriek | Date: | Fri, 17 Oct 2003 01:22:51 +0000 |
| Subject: | Re: $_POST in MySQL query issue... | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-166384@lists.php.net to get a copy of this message | ||
I concur, assign the superglobal array to a variable ...
$table= 'elements';
$Name = mysql_escape_string($_POST['elementName']);
$sql = "INSERT INTO $table SET Name= '$Name'";
... then use that opportunity to run a check on the output.
--
Jon Kriek
http://phpfreaks.com