Re: Complex escape string
| From: | Casey | Date: | Sat, 03 May 2008 17:36:38 +0000 |
| Subject: | Re: Complex escape string | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-273840@lists.php.net to get a copy of this message | ||
On 5/3/08, cyaugin <cyaugin@yahoo.com> wrote:
> I have this line of code:
>
> $q = "This is the string that will go into the query:
> {${mysql_real_escape_string($_GET['searchstring'])}}";
>
> What happens then is the user supplies 'foo' as the search string, and I get
> a debug notice "Undefined variable: foo". Why is it treating the value as an
> identifier and how do I make it do what I actually want it to do? This is on
> PHP5, latest release.
>
>
>
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>
$q = "This is the string that will go into the query: " .
mysql_real_escape_string($_GET['searchstring']);
--
-Casey