passing queries

[tallberg]

Im attemping to pass a $condtion variable from a hidden field back to the mysql_query. I can pass number but not value with quotes.

 

This is the code so far:

 

<? echo '<input type="hidden" name="query" value="' . $condition . '">'; ?>

 

Which is passed to

 

	if($condition == ''){
	  $condition = $_POST["query"];
	  echo "this is the condition ". $condition ." END ";
	}

 

 

result from my echo statement and the sql error:

 

this is the condition The_Usage LIKE ''%bog Garden, Pond%'' END Problem reading table here!: You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '%bog Garden, Pond%''' at line 1

 

Thanks if anyone can help

 

[ToonMariner]

add the quotes in the query....

 

[JJohnsenDK]

post the whole script... atleast post the mysql_query code you are using..

[tallberg]

What is happening is

 

 <? echo '<input type="hidden" name="query" value="' . $condition . '">'; ?>

 

posts back

 

The_Group=''Bamboo''     

 

some how an extra set of single quotes are posted arround the property.

 

[tallberg]

Found a solution.

 

<input type='hidden' name='query' value='<? echo urlencode($condition); ?>'>

 

 

$con = $_POST["query"];

$condition = urldecode($con);