mysql_real_escape_string

[RON_ron]

I'm trying to incorporate mysql_real_escape_string to my existing script. But doesn't seem to work. Could someone point out what's the reason.

 

$abc =sprintf("INSERT INTO my_db1 (username, password, firstname, company, email) VALUES ('%s', '%s', '%s', '%s', '%s'", mysql_real_escape_string($username), mysql_real_escape_string($password), mysql_real_escape_string($surname), mysql_real_escape_string($firstname), mysql_real_escape_string($company), mysql_real_escape_string($email)));
$resultg = mysql_query($abc);

[trq]

Look at your code.

 

You have 5 set string positions %s followed by 6 arguments containing mysql_real_escape_string. Your also missing the closing ) on your query.

[RON_ron]

simple as that!

 

Thanks Thorpe.