A further question

How should a statement like the one below be formatted?

$sql = "Select personal.name, personal.address, personal.town,
personal.country From personal Where name LIKE '%".$name."%'";

Thanks in advance



-----Original Message-----
From: Eric Haskins [mailto:[EMAIL PROTECTED] 
Sent: Monday, 26 March 2007 1:41 PM
To: CF-Talk
Subject: Re: OT - PHP Question

Use

 $_REQUEST['rec_ID']  or $_GET['rec_ID'] / $_POST['rec_ID']

Like so

$sql="SELECT * FROM personal WHERE ID = '" . $_REQUEST['rec_ID'] . "' ";

Most servers or hosts like me turn of Register Globals.  DOnt forget to use
strip_tags() or other form of input sanitation

Eric


On 3/25/07, Jochem van Dieten <[EMAIL PROTECTED]> wrote:
>
> Pete wrote:
> > Hi All just wondering if anyone knows of a similar PHP message board.
>
> http://nl2.php.net/support.php
>
>
> > And the second one (which should display the result however I keep
> getting
> > an error message when I have $rec_ID below.  It says :
> >
> > Sorry there is no information
> > Back PHP Notice: Undefined variable: rec_ID in
> > c:\Inetpub\wwwroot\personalphp\see_rec.php on line 8
>
> http://nl2.php.net/manual/en/reserved.variables.php#reserved.variables.get
>
> Jochem
>
> 



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Create Web Applications With ColdFusion MX7 & Flex 2. 
Build powerful, scalable RIAs. Free Trial
http://www.adobe.com/products/coldfusion/flex2/?sdid=RVJS 

Archive: 
http://www.houseoffusion.com/groups/CF-Talk/message.cfm/messageid:273689
Subscription: http://www.houseoffusion.com/groups/CF-Talk/subscribe.cfm
Unsubscribe: 
http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4

Reply via email to