Thanks Ramil, I knew it had something to do with the \, but I still can't figure out how to get the variable into the database without the extra '\' It is entered into the database via a form using the input below: <input name="ident" type="hidden" value="<?php echo $_SERVER[AUTH_USER];?>"> Where would I use the mysql_real_escape_string ? Thanks Justin -----Original Message----- From: Ramil Sagum [mailto:ramil.sagum@xxxxxxxxx] Sent: Friday, 1 October 2004 10:46 AM To: Baiocchi, Justin (CSIRO IT, Armidale) Cc: php-db@xxxxxxxxxxxxx Subject: Re: The variable $_SERVER['AUTH_USER'] gives domain\\username problem On Fri, 1 Oct 2004 10:27:45 +1000, justin.baiocchi@xxxxxxxx <justin.baiocchi@xxxxxxxx> wrote: > Hi, > > When I use the variable $_SERVER['AUTH_USER'] it comes out as > domain\\username when inserted into the MySQL database. So when I try to > update the record looking for a match as below it doesn't work because > the query is looking for where ident=domain\username. > > $result = mysql_query("UPDATE aec SET filename='$filename' WHERE > ident='".$_SERVER['AUTH_USER']."'") or die (mysql_error()); > > Anybody know what I am doing wrong? In MySQL, \ is an escape character. \\ stands for an actual \. for details, just click the link and read on http://www.php.net/manual/en/function.mysql-real-escape-string.php ---- ramil http://ramil.sagum.net -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php