Re: [PHP-DB] PHP and MYSQL Update problem

Manu Gupta wrote:
> try ..
> $q = addslashes("UPDATE episodes SET episode_title = '$_POST[episode_title]'
> ,
> episode_scheduleddate = ".strtotime($_POST['episode_scheduleddate'])."
> , episode_description = '$_POST[episode_description]' WHERE episode_id
> = $_POST[episode_id]");
> 
> or try
> 
> $q = "UPDATE episodes SET episode_title = '{$_POST[episode_title]}' ,
> episode_scheduleddate = "{.strtotime($_POST['episode_scheduleddate'])}."
> , episode_description = '{$_POST[episode_description]}' WHERE episode_id
> = {$_POST[episode_id]}";

Good idea but you don't addslashes the whole query (and addslashes is 
the wrong thing to use).

Use mysql_real_escape_string around bits and pieces you want to escape:

$q = "update episodes set episode_title='" . 
mysql_real_escape_string($_POST['episode_title']) . "', ......

-- 
Postgresql & php tutorials
http://www.designmagick.com/