Posted by Hilarion on 09/07/05 15:05

tvlgiao <tvlgiao@gmail.com> wrote:
> you should use:
> $album = "Led Zeppelin";
> $query = $db->getAll("SELECT * FROM music WHERE (title = '$album')");


Rivera, tvlgiao is right, but you should also remember that if
$album value comes from website user and you have magicquotes_gpc
turned off, then the query may still fail and/or be prone to SQL
injection attacks.


Hilarion

[Back to original message]