Hi,
Protect your database
http://www.php.net/manual/en/function.htmlspecialchars.php
PHP Security Consortium http://phpsec.org/
Protect SQL Injection Attack
See more
http://www.php.net/manual/en/function.mysql-real-escape-string.php
The query sent to
#x27;email1'],$_post['email2'],$_POST['$web'],$_POST['casilla'],$_POST['observaciones'])";
-Original message-----
From: Marcelo Fabiani [EMAIL PROTECTED]
Date: Fri, 01 Sep 2006 15:27:19 -0300
To: Jerry Schwartz [EMAIL PROTECTED]
Subject: Re: h
Chris W escribió:
Marcelo Fabiani wrote:
Here is the code: . . .
$result = mysql_query($sq)or die ("problema Leyendo Tabla");;
. . .
Why are there two ; at the end of that line? I'm really not sure what
if anything that will do but I would remove it just in case.
Also are there an
Marcelo Fabiani wrote:
Here is the code: . . .
$result = mysql_query($sq)or die ("problema Leyendo Tabla");;
. . .
Why are there two ; at the end of that line? I'm really not sure what
if anything that will do but I would remove it just in case.
Also are there any triggers on this
John Meyer escribió:
Try this
$retval = mysql_query($sql) or die(mysql_error())
To at least get an idea of what MySQL thinks is the error.
The is no error in the insert it adds the row, but in addition add's two
more rows with no data, only the auto_increment ;
Example:
Adds
1 Marcelo
> [EMAIL PROTECTED] escribió:
>> Marcelo,
>>
>> The usual advice is to echo out the query string and examine it for
syntax.
>> Assuming it has form data in it for the variables, then try
copying/pasting
>> it into the mysql client and run it from there. Let us know how that
goes.
>>
>> David
>>
>
[EMAIL PROTECTED] escribió:
Marcelo,
The usual advice is to echo out the query string and examine it for syntax.
Assuming it has form data in it for the variables, then try copying/pasting
it into the mysql client and run it from there. Let us know how that goes.
David
Already done that
Marcelo,
The usual advice is to echo out the query string and examine it for syntax.
Assuming it has form data in it for the variables, then try copying/pasting
it into the mysql client and run it from there. Let us know how that goes.
David
--
MySQL General Mailing List
For list archives:
06032
860.674.8796 / FAX: 860.674.8341
-Original Message-
From: Marcelo Fabiani [mailto:[EMAIL PROTECTED]
Sent: Friday, September 01, 2006 1:06 PM
To: mysql@lists.mysql.com
Subject: help with insert +php
I'm trying to insert some data to my our web database, but when Insert
the data, it inser
.8341
-Original Message-
From: Marcelo Fabiani [mailto:[EMAIL PROTECTED]
Sent: Friday, September 01, 2006 1:06 PM
To: mysql@lists.mysql.com
Subject: help with insert +php
I'm trying to insert some data to my our web database, but when Insert
the data, it inserts all the data from my fo
I'm trying to insert some data to my our web database, but when Insert
the data, it inserts all the data from my form and ads two rows with no
data.
Can someone tell me what I'm doing wrong?
Here is the code:
include 'config.php';
include 'opendb.php';
$sql="INSERT INTO e
11 matches
Mail list logo