Posted by Oli Filth on 01/15/06 06:39
cover said the following on 15/01/2006 04:34:
> I'm trying to put together a system that upgrades records in a
> database and apparently have run into a bit of a glitch. I think the
> problem is with the $HTTP_POST_VARS portion of the code. Is there
> some variable that has to be set for this to work properly or what?
> Ideas anyone? TIA
>
<...SNIP CODE...>
$HTTP_POST_VARS has been superceded by $_POST since PHP 4.1.0.
Also worth mentioning that you should use mysql_real_escape_string() on
all user-entered string values used in a MySQL query, and explicitly
cast numeric types before using in the SQL query.
--
Oli
Navigation:
[Reply to this message]
|