Wade Smart wrote: > $query = "SELECT name FROM deer_product WHERE > deer_type='".$_GET['deer_type']."'";
NEVER EVER do queries like this. This is 100% open to sql injection. Anyone could destroy view, truncate, etc you're entire database... or even worse, gain access to private data. You must parse request (get,post,cookies,form,session,server) variables before putting them into a query command.
