Posted by Oli Filth on 01/15/06 06:39

cover said the following on 15/01/2006 04:34:
> I'm trying to put together a system that upgrades records in a
> database and apparently have run into a bit of a glitch. I think the
> problem is with the $HTTP_POST_VARS portion of the code. Is there
> some variable that has to be set for this to work properly or what?
> Ideas anyone? TIA
>

<...SNIP CODE...>

$HTTP_POST_VARS has been superceded by $_POST since PHP 4.1.0.

Also worth mentioning that you should use mysql_real_escape_string() on
all user-entered string values used in a MySQL query, and explicitly
cast numeric types before using in the SQL query.

--
Oli

[Back to original message]