mrant
-
Posts
2 -
Joined
-
Last visited
Never
mrant's Achievements
Newbie (1/5)
0
Reputation
-
Hi, In script.php I can see odbc_connect, you then build the SQL statement to be executed into $sql and the next step is the odbc_close. At no point are you executing the SQL statement say with odbc_exec or with a prepare and execute. Of course you need to seriously sanitise that data as it is horribly wide open at the moment - but then you know that already Ant
-
No idea at all as the code looks spot on. If $level is set to "a" then $level will be "Level 1", set to "b" it will be "Level 2" and anything else will be set to "Level 3". This would suggest that $level is not set to a or b? Not much help, but at leat you know this code is good