[post mysql query]

ok with 

$sql = stripslashes(substr($_POST['tag'], 15, 2000));

stripslashes its what i need thankss all for the help.

[post mysql query]

ok now i get an syntax error because php put the query like this

"\'pgtobtn=\'n'

way this \ added to the query?????

thanks alll

[post mysql query]

no my database its set to varchar

if i put manualy it keeps only when i try to update via php dont do nothing...

[post mysql query]

hi all 

<?php
if (substr($_POST['tag'], 0, 15) == 'chave|commando|'){
include 'db_con.php';
session_start();
$sql = substr($_POST['tag'], 15, 2000);						
$result = mysql_query($sql);
mysql_close($con);
echo $results;
} else { 
"<script>window.location = 'http://www.google.com'</script>";
}
?>

the tag recive "Update config_hal SET pgtobtn = 5 " if i send the tag like that this works fine ...

if i try to send like that  "Update config_hal SET pgtobtn = N " this dont work...

i know that i should write something like this "Update config_hal SET pgtobtn = 'N' " but also dont work 

can anybody tellme whats wrong with my code????

[mysql query from post]

sorry im new at this forum...

and the $sql recive something like "UPDATE table SET pgtobtn = S" i know that it should be with coutes

how i can move the topic??? 

thanks alll

[mysql query from post]

hi all i have this code

<?php
if (substr($_POST['tag'], 0, 15) == 'chave|commando|'){
include 'db_con.php';
session_start();
$sql = substr($_POST['tag'], 15, 2000);
mysql_real_escape_string();											  
$result = mysql_query($sql);
//if(mysql_num_rows($result) > 0)
//while($row=mysql_fetch_row($result,MYSQL_ASSOC))
//$results=$row['nome'].";".$row['creditos'].";".$row['comeu'].";".$row['entradasp'].";".$row['saidasp'].";".$row['entradast'].";".$row['saidast'].";".$row['percmax'].";".$row['percmin'].";".$//row['premio'];
mysql_close($con);
echo $results;
} else { 
"<script>window.location = 'http://www.google.com'</script>";
}


?>

this codes recives a complete string from vb.net aplication the problem is

this code updates ok if the string contains only number but if i try to send any leters they dont write or insert on my sql can anybody tellme way ?

i think that it because of quotes but i dont know how to use it.. realy thanks alll