July 30th, 2003, 08:56 AM
|
|
Contributing User
|
|
Join Date: Aug 2002
Posts: 232
Time spent in forums: < 1 sec
Reputation Power: 6
|
|
PHP Code:
$query="INSERT INTO maps_admin (admin_name) VALUES ('" . mysql_escape_string($_GET['values']) . "')";
mysql_query($query) or die(mysql_error().'<br/>'.$query);
1. Don't insert querystring data directly into your db without at least minimal processing, eg, escaping it.
2. Use the or clause to die and display your mysql error and query together so you can see the problem =)
|
Dev Articles Community Forums Sponsor:
Del.icio.us
Digg
Google
Spurl
Blink
Furl
Simpy
Y! MyWeb
Linear Mode
