in reply to Re: Using CGI params for SQL statement
in thread Using CGI params for SQL statement

The code here is basic and I would never use anything like it on a server. In reality I always check returned params.
By keeping code simple for as long as possible alows me to work through the problem and hopefully let others help me out :)
Stacy.
  • Comment on Re: Re: Using CGI params for SQL statement

Replies are listed 'Best First'.
Re: Re: Re: Using CGI params for SQL statement
by IlyaM (Parson) on Feb 26, 2002 at 12:50 UTC
    IMHO in any event it is better to post code which follows good coding practices unless it requires significant efforts. There exist danger that some newbie will just copy your code blindly. Were you added just one line which checks value of CGI parameter there could be a chance to educate him/her about proper way.

    --
    Ilya Martynov (http://martynov.org/)

      Fair enough...

      Regards,
      Stacy.