Posted by Toby A Inkster on 05/04/07 08:02

blessblessbless wrote:

> does this not work?
> $sql = "insert ... values ('".$_POST['email']."')...";

$sql = sprintf("INSERT INTO people VALUES ('%s', '%s', %d);"
,pg_escape_string($_POST['name'])
,pg_escape_string($_POST['email'])
,(int)$_POST['age']
);

--
Toby A Inkster BSc (Hons) ARCS
http://tobyinkster.co.uk/
Geek of ~ HTML/SQL/Perl/PHP/Python/Apache/Linux

• Next in forum: Re: Recursionalism
• Prev in forum: Re: HELP - Can't change Include Path
• Thread view: Re: $_POST and Building SQL Strings

[Reply to this message]