Posted by davek on 10/24/06 20:20

Markus Ernst wrote:
> End quote missing here ^

doh! I missed that completely... thanks - just goes to show that
another pair of eyes is always useful...

> BTW it is a bad idea to put post data directly into your query - you
> should check them for security issues and escape quotes first. Google
> for "sql injection" and "e-mail injection".

Thanks for the tip - I've seen sql injections mentioned elsewhere so
I'm vaguely aware of them and will get to grips with how to avoid them
before the site goes live... fortunately, it still exists only on my
testing server at the moment.

d.

[Back to original message]