Slightly OT:

I hope this is not your real code, you are open for a SQL injection 
here. You need to remove any bad SQL inserted in 'submit_policy', eg. by 
using mysqlspecialchars().


>  $query_loss = "SELECT"
>                   . " LOSS_NUM"
>                   . " FROM LOSS"
>                   . " WHERE POL_NUM = '".
> $_GET['submit_policy']."'";


-- 
"Laut einer Studie der deutschen Ärztevereinigung sterben immer
mehr Rentner vor dem Computer. Sie drücken versehentlich die
Tastenkombination Alt+Entfernen."

http://www.landseer-stuttgart.de
http://www.pn-cms.de

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Ruby 
on Rails: Spinoffs" group.
To post to this group, send email to rubyonrails-spinoffs@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/rubyonrails-spinoffs?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to