On 27 Feb 2008, at 23:44, Nasreen Laghari wrote:
Thank you for increasing my knowledge about PHP/MYSQL.
The question you ask below is basic SQL syntax. Please read the MySQL
manual before asking here - answers at this level are all in there.
http://mysql.com/doc
Oh, and once you have it working try entering
';delete * from gig;select * from gig where Name='
(including quotes) into the gig_name form field. When you get over the
loss of all your data go read about sanitising your input: http://php.net/mysql_real_escape_string
-Stut
--
http://stut.net/
I am creating a SEARCH, by only using one table. The search form is
same as Inserting item (search has form of all fields in table ),
difference is SEARCH page doesnt have validation . Therefore user
can enter information in any of field. I would like to know how to
write a SELECT query which has multiple where clause with OR operator.
shall we write:
$query = mysql_query("SELECT * from gig WHERE Name='$name' || WHERE
gig_fdate='$sdate'");
OR
$query = mysql_query("SELECT * from gig WHERE gigName='$gig_name' OR
WHERE gig_fdate='$sdate'");
OR
$query = mysql_query("SELECT * from gig WHERE gigName='$gig_name'
|| gig_fdate='$sdate'");
Regards
Nasreen
____________________________________________________________________________________
Looking for last minute shopping deals?
Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping
--
PHP Database Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
