I have the following code - when someone enters a whatever ' whatever into one of my
forms my script dies because of the single quote. Arrrrggg... of course the first time
I come across it is when my boss is testing out the script.
$sth = $dbh->do( "insert into maintenance (owner, email, maintype, title, requested,
engineer, ticket, impact, comm,
dispo, dispodate, action, sponname, sponop, sponcp, sponp, conname, conop, concp,
conp, partname, partop, partcp, par
tp, manname, manop, mancp, manp, dbaname, dbaop, dbacp, dbap, engname, engop, engcp,
engp, mainname, mainop, maincp,
mainp, process, rollback, closeout, datetime, purpose, risk, saname, saop, sacp, sap,
total, pending, counting) value
s ('$owner', '@names', '$maintype', '$title', '$requested', '$engineer', '$ticket',
'$impact', '$comm', '$dispo', '$d
ispodate', '$action', '$sponname', '$sponop', '$sponcp', '$sponp', '$conname',
'$conop', '$concp', '$conp', '$partnam
e', '$partop', '$partcp', '$partp', '$manname', '$manop', '$mancp', '$manp',
'$dbaname', '$dbaop', '$dbacp', '$dbap',
'$engname', '$engop', '$engcp', '$engp', '$mainname', '$mainop', '$maincp', '$mainp',
'$process', '$rollback', '$clo
seout', '$datetime', '$purpose', '$risk', '$saname', '$saop', '$sacp', '$sap',
'$total', '$pending', '$counting')");
---------------------------------
Do You Yahoo!?
Sign-up for Video Highlights of 2002 FIFA World Cup
