Re: table.php

From: Date: Mon, 11 Oct 2004 22:25:49 +0000
Subject: Re: table.php
References: 1 2  Groups: php.pear.general 
Request: Send a blank email to pear-general+get-14859@lists.php.net to get a copy of this message
On Oct 11, 2004, at 5:07 PM, Klaus Guenther wrote:
What it sounds like you want to do is to use the $_GET variable... as in... $url = 'http://example.com/companydetails.php?id=' . $row['cmpy_name']; Then in companydetails.php you get the id from the $_GET['id'] variable. Of course, there is the more than likely probability that someone will call the page without passing the ID. So put a check in there for that.
And for Bog's sake please sanitize that GET var before you use it. Run it through strip_tags at least, and be sure to use DB::smartQuote() on it before putting it in an SQL query. -- pmj

« previous php.pear.general (#14859) next »