addSlashes problem....5 lines code
| From: | Ryan A | Date: | Mon, 12 Jan 2004 04:31:22 +0000 |
| Subject: | addSlashes problem....5 lines code | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-174278@lists.php.net to get a copy of this message | ||
Hi,
I am getting some input from a client in a text area, the input is an sql
statement, so I am using addslashes but the damn thing is not working...any
idea why?
Heres my code:
if(isset($_POST['the_sql_command']))
{
$the_sql_command=$_POST['the_sql_command'];
$the_sql_command=addslashes($the_sql_command);
}else{$the_sql_command="none";}
I tested it out by entering this sql into the database:
insert into testing_table values('bill o'reilly')
Opening phpmyadmin I looked in the able and there are no slashes being
applied.....!!????
just this: insert into testing_table values('bill o'reilly')
(and yes, I did try this too:
$the_sql_command=addslashes($_POST['the_sql_command']); )
What am I missing?
Cheers,
-Ryan