Omar This is the least of your worries .... google SQL injection attacks before you waste too much more development time trying to resolve this issue.
Pete -----Original Message----- From: [EMAIL PROTECTED] on behalf of Omar Fouad Sent: Sat 2/2/2008 1:07 AM To: Flash Coders List Subject: [Flashcoders] LoadVars and SQL Query issue I am doing an application where I'm writing some classes that sends queries to a php file by using LoadVars.send(). var toSend:LoadVars = new LoadVars(); var myQuery:String = "select * from users where Name = 'Omar Fouad' "; toSend.query = myQuery; // traces select * from users where Name = 'Omar Fouad' toSend.send("File.php", "_self", "POST"); At this phase the php files receive the query and when I echo the query string appears: select * from users where Name = \'Omar Fouad\' That's is how it is sent to the server so of course it shows an SQL error because of the backslashes. Apparently it does not recognize the "String in the String" part of the query that is sent from Flash. When I send a query for a Number like: select ^ from users where id = 1 it queries the database without problems. How can I solve this problem? Thanks and Regards. -- Omar M. Fouad - Digital Emotions http://www.omarfouad.net This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. _______________________________________________ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________ _______________________________________________ Flashcoders mailing list Flashcoders@chattyfig.figleaf.com http://chattyfig.figleaf.com/mailman/listinfo/flashcoders