note 100394 deleted from faq by danbrown

From: Date: Wed, 13 Oct 2010 22:18:10 +0000
Subject: note 100394 deleted from faq by danbrown
References: 1  Groups: php.notes 
Request: Send a blank email to php-notes+get-173202@lists.php.net to get a copy of this message
Note Submitter: adam dot pilorz at labsql dot pl ---- @zad_k at yahoo dot com You probably have an error in your SQL syntax - use <?php mysql_query( '...' ) or die( mysql_error() ); ?> to see the MySQL Error Message. Additionaly, using $_POST (just as $_GET, $_FILES etc.) variables in SQL syntax without checking it is highly dangerous (see: "SQL Injection" in Google), I would at least use <?php mysql_real_escape_string(); ?>, if I were you.

« previous php.notes (#173202) next »