If ID is supposed to be an integer (as most IDs are), I'd just use
$Idata=intval($_GET["id"]);
if($Idata)
{
//do query
}
and be done with it
(2012-06-04, 05:17 PM)pavemen Wrote: [ -> ]If ID is supposed to be an integer (as most IDs are), I'd just use
$Idata=intval($_GET["id"]);
if($Idata)
{
//do query
}
and be done with it
if not then ? suppose someone enter id='6 (a sql injection attack) then does the same page comes or query again doesn't execute ?
the Idata = 0 since the ' is a string. the Id must be an integer for it to be a non-zero return value
Thanks, its not working as I want, but it solves the problem
