Menu
Community /Pin to ProfileBookmark
—-
@NogDogOct 30.2006 — #See Example 3 on www.php.net/mysql_real_escape_string for a way to prevent SQL injection attacks (and automatically handle the quoting where necessary).@NogDogOct 30.2006 — #Better would be:
There's no need to quote the variable if that's all that's being assigned, plus your array index should be quoted when it's a string literal like that.
PS: I just noticed that you used ID01 (with a zero) for the cookie ID, but IDO1 (with a capital letterl "O") for the session value. I'm guessing the latter should also be a zero?
Syntax error with Special Characters in Password
Hi,
I am having trouble with validation.
When I validate a user I’m getting errors with special characters in the username and password.
The error appears in $result = mysql_query($sql)
Username is similar to this: username[b]@honeycombworldwide.com
Password is similar to this: password[b]!
—-
[code=php]$password = $_POST[‘password’];
$username = $_POST[‘username’];
$sql = “SELECT * FROM it_mem WHERE Mem_Email=”.$username.” AND Mem_Password=”.$password;
$result = mysql_query($sql) or die (mysql_error());[/code] —
When I echo $result with $username and $password filters, i get this error:
[code]You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘@honeycombworldwide.com AND Mem_Password=password!’ at line 1
When I echo $result with just $password as a filter, i get this error:
[code]You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near ‘!’ at line 1
—
Any idea? Thanks for looking
Sign in
to post a comment5 Comments(s) ↴
0
@NogDogOct 30.2006 — #See Example 3 on 0
@NogDogOct 30.2006 — #Better would be:[code=php]
$_SESSION['IDO1'] = $accessresults['Mem_ID'];
[/code]There's no need to quote the variable if that's all that's being assigned, plus your array index should be quoted when it's a string literal like that.
PS: I just noticed that you used ID01 (with a zero) for the cookie ID, but IDO1 (with a capital letterl "O") for the session value. I'm guessing the latter should also be a zero?