I avoid all string parameters that I get from php form, for example:
$usr_name = mysql_real_escape_string($_REQUEST['usr_name']);
to avoid a few problems with SQL Injection. But when I return from the function, I get nothing.
I also keep getting this strange warning in my PHP log:
PHP Warning: mysql_real_escape_string() [<a href='function.mysql-real-escape-string'>function.mysql-real-escape-string</a>]: A link to the server could not be established in /hermes/bosweb/web279/b2798/ipw.bankingforms/public_html/formAckResponse_controller.php on line 39
The host uses: PHP Version 4.4.7
php mysql mysql-real-escape-string
leeand00
source share