mcmuney Posted February 16, 2013 Share Posted February 16, 2013 I have the code below in a script where descriptions can be added to an image, which is referenced in the code as a comment. Everything seems to work fine, EXCEPT when there is a "?" in the comment, in which case, the second update doesn't execute. Any idea why and any solution to this problem? $db->update("UPDATE `sc_member_images` SET ordering=-1 WHERE scm_mem_id='{$social_mem_id}'"); for($i=0;$i<count($_POST['p']);$i++) { $q="UPDATE `sc_member_images` SET ordering='".($i+1)."',sci_caption='".addslashes($_POST['p'][$i][comment])."' WHERE sci_id='{$_POST['p'][$i][image]}'"; $db->update_data($q)or die(mysql_error()); } Link to comment https://forums.phpfreaks.com/topic/274556-issue-with-in-comment/ Share on other sites More sharing options...
trq Posted February 16, 2013 Share Posted February 16, 2013 Don't use user inputed data directly in database queries anyway, your opening all sorts of cans of worms in relation to security issues. What database engine are you using there? Surely it has mechanisms for escaping data properly? Link to comment https://forums.phpfreaks.com/topic/274556-issue-with-in-comment/#findComment-1412752 Share on other sites More sharing options...
mcmuney Posted February 16, 2013 Author Share Posted February 16, 2013 It's a mysql database. It's a text field, but I'm not sure why the ? would be an issue. Link to comment https://forums.phpfreaks.com/topic/274556-issue-with-in-comment/#findComment-1412753 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.