note 41496 deleted from function.get-magic-quotes-gpc by tomsommer
| From: | tomsommer@php.net | Date: | Mon, 12 Apr 2004 18:04:45 +0000 |
| Subject: | note 41496 deleted from function.get-magic-quotes-gpc by tomsommer | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-68031@lists.php.net to get a copy of this message | ||
Note Submitter: webmaster@livetamil.com
----
When using with MySQL
You could use Captain America's code (above) and addslashes in your query string:
For example:
$sql = "UPDATE live_users u, live_netpals n SET u.user_nick =
'".addslashes($_POST['user_nick'])."', u.user_website =
'".addslashes($_POST['user_website'])."', u.user_showprofile =
'".$_POST['user_showprofile']."', u.user_mailinglist =
'".$_POST['user_mailinglist']."', u.user_from =
'".$_POST['user_from']."' WHERE u.user_id = n.user_id AND username =
'".$username."'";
This works for me and I'm sure it will work for you...