On Wed, Jan 14, 2009 at 11:17 AM, MikeP <mpel...@princeton.edu> wrote: > Hello, > I am trying to get the following to work: > "Select Netid from Users where Netid = '$_SESSION[phpCAS][user]'" > Netid is a string type. > No matter where of if I put the quotes, I still get array[phpCAS] not the > value. > If there is anything I still have trouble with after all these years its > quoting variables. > Help? > Thanks > Mike > > > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, visit: http://www.php.net/unsub.php > >
Dude we just helped you with this same exact thing the other day. And you're still allowing SQL injection. -- PHP General Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php
