You will also want to make sure to escape the quotes in your article if you
don't have "magic quotes" on.

$informationtitle = mysql_escape_string($_POST['informationtitle']);
$informationhtml = mysql_escape_string($_POST['informationhtml']);
$informationtype = mysql_escape_string($_POST['informationtype']);
$informationdate = mysql_escape_string($_POST['informationdate']);

Although this might be an admin tool and SQL injection isn't a worry, you
still want to be able to use apostrophes and quotes in your articles.

--
Jacob Wright
Within Code LLC

On 6/21/07, Justin Giboney <[EMAIL PROTECTED]> wrote:

I got it to work, I had forgotten that I had added a column in the
table and I didn't add it to the entry form.

Anyone, got a new paper bag, the one I've got is a little used.

Justin Giboney
www.giboneydesigns.com


On Jun 21, 2007, at 8:31 AM, Wade Preston Shearer wrote:

>> The website has 30 to 40 articles that can be quite long. My
>> initial idea was to build a php form to input the html of the
>> articles into MySQL, but when I did a GET, it said that the URL
>> was too long. So I switched the exact code to a POST instead.
>> There was no error, but it didn't add anything to the database
>> either. Anyone have experience with this.
>
> Yes, you won't want to use GET as the entire article will be in the
> URL.
>
> The first thing that I would do would be to test your SQL query
> directly on the command line. That let you know immediately if the
> problem is with your form, your query, or your database, etc.



_______________________________________________

UPHPU mailing list
[email protected]
http://uphpu.org/mailman/listinfo/uphpu
IRC: #uphpu on irc.freenode.net


_______________________________________________

UPHPU mailing list
[email protected]
http://uphpu.org/mailman/listinfo/uphpu
IRC: #uphpu on irc.freenode.net

Reply via email to