--- Jason Wong <[EMAIL PROTECTED]> wrote:
> When you're building a query string then (in
> general) there is no need for
> urldecode(). On the contrary you want to use
> urlencode(), this is done on the
> *value* of the individual parameters.
>
> And about this: $_POST["Ind[]"], it's obvious you
> haven't absorbed what I
> said about this particular construct. Please re-read
> my previous post
> regarding this and try to understand it.
> If the URL on the searchpage was constructed
> properly then on
> searchresults.php the values passed can be read from
> $_GET directly with no
> further processing (ie no need for urldecode() and
> other such nonsese) on
> your part. But remember, you still need to validate
> the data you get from
> $_GET (and in general from $_POST etc) before you
> use them.
>
Sorry, for some reason my email is out of synch today.
First the searchresults.php is reading the values
properly. The queries are running correct-all fields.
I'm still printing out the sql statement and those
are without the hex values.
The method is $_GET , search.php is nothing more then
some form elements and fields.
For searchresults.php (right below) is the way I'm
grabbing everything:
$HTTP_GET_VARS['Ind'];
// check any item is selected
if (count($Ind) > 0 AND is_array($Ind)) {
$s_Ind = "'".implode("','", $Ind)."'";
}
$HTTP_GET_VARS['State'];
// check any item is selected
if (count($State) > 0 AND is_array($State)) {
$s_State = "'".implode("','", $State)."'";
}
$HTTP_GET_VARS['TType'];
// check any item is selected
if (count($TType) > 0 AND is_array($TType)) {
$s_TType = "'".implode("','", $TType)."'";
}
//Textfields / Dropdown
$HTTP_GET_VARS['JTitle'];
$HTTP_GET_VARS['City'];
$HTTP_GET_VARS['Days'];
I'm not seeing what is incorrect. I did try
$HTTP_GET_VARS['Ind'] = urldecode('Ind'); (in
searchresults.php) but of course it wasn't imploded
yet. I don't want to confuse this question or myself
(or anyone) , but maybe I should do the implodes on
search.php ?
Stuart
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
