> > Bottom line is that you want to use addslashes() or
> > on any variable you're going to insert into a query string. If
> > inserting a variable that should be a number, make sure it is one.
> If I have magic quotes turned on, do I still need to worry about using
No, it's automatic. You may want to program in a check that sees if
magic_quotes is on or off, though, and act accordingly.
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php