Posted by Frankie on 07/12/06 18:21

"Robin" <anon@somewhere.com> wrote in message
news:e8vnab$87k$1@gemini.csx.cam.ac.uk...
>
> <snip>
>
> I hope you're checking those $_POST variables before blindly making the
> SQL call!

Yes, $_POST['selectCategory'] comes from a select menu while
$_POST['tfItemNum'] is checked by "ereg", and then again by "strip_tags" if
re-displayed.

Thanks again to all who responded.

F.H.

[Back to original message]