Re: isset question
| From: | Reese | Date: | Sat, 20 Jun 2009 16:32:59 +0000 |
| Subject: | Re: isset question | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-294365@lists.php.net to get a copy of this message | ||
Waynn Lue wrote:
I notice that you're checking $_POST['mort'] but you're echoing $mort, is that your actual code?That was my observation as well. Is $mort = $POST['mort']; being set somewhere else or not? If not, how is your script supposed to know what value $mort should be? And, what the other guys said. Gary, before you do anything with submitted data you need to process it against strip_tags() and/or htmlentities() at the very least, mysql_real_escape_string() if the data goes to a db. Reese --
On 6/18/09, Gary <gwpaul@ptd.net> wrote:I have a form that gives the submitter a choice or either one set of questions, or another. I am still getting the message even if the input was left blank. So on the line below, $msg.= isset($_POST['mort']) ? "The mortgage amount is $mort\n" : " ";