|
Posted by Hilarion on 09/07/05 15:05
tvlgiao <tvlgiao@gmail.com> wrote:
> you should use:
> $album = "Led Zeppelin";
> $query = $db->getAll("SELECT * FROM music WHERE (title = '$album')");
Rivera, tvlgiao is right, but you should also remember that if
$album value comes from website user and you have magicquotes_gpc
turned off, then the query may still fail and/or be prone to SQL
injection attacks.
Hilarion
Navigation:
[Reply to this message]
|