Posted by Toby A Inkster on 05/04/07 08:02
blessblessbless wrote:
> does this not work?
> $sql = "insert ... values ('".$_POST['email']."')...";
$sql = sprintf("INSERT INTO people VALUES ('%s', '%s', %d);"
,pg_escape_string($_POST['name'])
,pg_escape_string($_POST['email'])
,(int)$_POST['age']
);
--
Toby A Inkster BSc (Hons) ARCS
http://tobyinkster.co.uk/
Geek of ~ HTML/SQL/Perl/PHP/Python/Apache/Linux
[Back to original message]
|