* Thus wrote Pablo Gosse ([EMAIL PROTECTED]):
> Yours:
> 
> $query="SELECT payment 
> FROM payment 
> WHERE payment.dln='".$_POST["dln"]."' 
> = users.dln='".$_POST["dln"]."' 
> and payment.payment='".$_POST["payment"]."'";
> 
> Mine:
> 
> $query="SELECT payment 
> FROM payment 
> WHERE payment.dln='".$_POST["dln"]."' 
> AND 
> users.dln='".$_POST["dln"]."' 
> and payment.payment='".$_POST["payment"]."'";
> 
> See the difference?

heh.. still wont work :/  the table users still isn't in the FROM
list like what was suggested in the last post:

$query="SELECT payment 
 FROM payment, users
WHERE payment.dln=users.dln
 AND users.dln='".untainted($_POST["dln"])."' 
 and payment.payment='".untainted($_POST["payment"])."'";


Curt
-- 
"My PHP key is worn out"

  PHP List stats since 1997: 
    http://zirzow.dyndns.org/html/mlists/

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to