JohnHaywood

Thanks yes, that makes perfect sense! What was I thinking (rhetorical question). Easy enough to strip the comma's (from form data) using PHP prior to storing in the DB and then restore them for rendering the output on the page later.

I have to agree with the other replies. You have far more serious issues on that site and a "quick fix" is a little pointless without addressing the root cause. Check your logs and check all the forms that process user data to make sure all the data is sanitised and validated properly (server side).

I am in the process of creating a website (PHP/MySQL) that will store products for sale. I would normally use DECIMAL as the data type but have hit upon a slight snag. The website is for exclusive use within Vietnam and they do not use any sub units of currency e.g. no pence, cents etc. Their currency is the Vietnamese Dong (VND). The smallest value is 500 and all other currency units are in thousands and the only currency seperator they use is the comma. Typically, an item may cost 200,000 VND to 40,000,000 but when using DECIMAL it is stripping the comma seperator and storing (200,000) as just "200" even if I use something like DECIMAL(10,0). Is there a specific data type I can use that will accept a value like 200,000 and NOT 200,000.00 ??