IMHO

$query = "SELECT shoodID FROM shoots WHERE location=\"$location\"";

and even

$query = "SELECT shoodID FROM shoots WHERE location='$location'";

sometimes cause SQL Syntax Error,
because the variable $location may contain quote characters (')(")...

since i experienced the same thing i've been doing like this...
(the reason is just that i did with 2 byte japanese characters?)

--------------------------------------------------------
$query = sprintf(
        'SELECT shootID FROM shoots WHERE location="%s"',
        AddSlashes( $location )
);
--------------------------------------------------------

going well, but is this code too ugry?


-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Reply via email to