jamesmiddz

Thanks ;) Most certainly will do. James

Hi gerkintrigg, Thanks for the reply. The original strings data would be passed from a form. Would GET protect from data injections? James

Hi, can anyone tell me how I could prevent data injection into the following code? <?php include("connect.php"); $name = $_POST['name']; $address = $_POST['address']; $tel = $_POST['tel']; $query = "INSERT INTO people (id, name, address, tel) VALUES ('', '$name', '$address', '$tel')"; $results = mysql_query($query) or die ("Could not execute query : $query." . mysql_error()); if ($results) { echo "Details added."; } ?> James

Thanks for your thoughts. Could you give me an example of how the code should be to avoid these kind of injections...you've got me interested ;) James

That sounds like a great suggestion. I think it is useful to have seperate pages for certain builds, but I think that I might offer both. I'm sure that some people may be put off by all of the seperate pages. I could present the option somewhere during the process - all on one page or seperate pages. Thanks for this ;) James

Hi all, I have just release my PHP MySQL online generator. It's free to use for whatever purpose. I designed it for myself originally to cut down on the repetitive task of sending strings to and from a MySQL database via PHP scripting. Feel free to use it :P. http://www.turningturnip.co.uk/free_mysql_php_generator/ All the best, James