note 35217 deleted from function.mysql-real-escape-string by vincent
| From: | vincent@php.net | Date: | Sat, 23 Aug 2003 18:58:14 +0000 |
| Subject: | note 35217 deleted from function.mysql-real-escape-string by vincent | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-54972@lists.php.net to get a copy of this message | ||
Note Submitter: Stuph
----
Putting quotes around numbers is silly/wrong.
fix/eliminate the problem before it gets to *SQL:
$new_num = intval( $_POST['new_num'] );