Menu
Community /Pin to ProfileBookmark
@NogDogApr 23.2010 — #First, you should never put user-supplied (or any external) data directly into a query, as it leaves you vulnerable to SQL injection errors/attacks, so you should escape the input with the appropriate mechanism for the DB interface being used.
Retrieving data stored in URL
I know how to use “echo $_get” to grab a piece of data stored in the url, e.g. google.com?page=[b]5
I would be able to make my webpage show:
You are on page [b]5
However I am having issues taking that url data and using it within the script.
[CODE]$result = mysql_query(“SELECT * FROM users WHERE email=”echo $_GET[“email”)””;
This is sort of what I want it to do, apart from I need the mysql query to bring back the array where column “email” equals the bit in my URL: google.com?email=[b]
I’m sure it’s deadly simple, but as I have never learnt PHP – all I have is common sense and logic!
Sign in
to post a comment2 Comments(s) ↴
0
@NogDogApr 23.2010 — #First, you should never put user-supplied (or any external) data directly into a query, as it leaves you vulnerable to SQL injection errors/attacks, so you should escape the input with the appropriate mechanism for the DB interface being used.[code=php]
$sql = sprintf(
"SELECT * FROM users WHERE email='%s'",
mysql_real_escape_string($_GET["email"])
);
$result = mysql_query($sql);
[/code]