Form and MySQL problem. No, not register_globals-related :)

[jetthe]

I'm experiencing an strange problem in my newly created (15min-hack) "forum". It simply refused to insert some posts into the database. The snippet that inserts the code it simplest ever:

Code: Select all

if($do_post)
        {
        mysql_query("INSERT INTO forum (name,contents,user,mid) VALUES ('$p_name','$p_contents','$p_user','$p_mid')");
      header("Location: $PHP_SELF");
        }


and it works really great in most cases, I honestly don't have a clue why it refused to work with some posts. Check it out on:
http://www.clan-elite.dot.nu/


if you need more info, please say so =)

thnx in advance,

[*JaH*]

you can't insert every kind of character Some chars you have to escape before inserting into yur database

[Oleg Butuzov]

little corections... can you tell us what do get when run thi script?

Code: Select all

if(isset($do_post))
        {
        mysql_query("INSERT INTO forum (name,contents,user,mid) VALUES ('$p_name','$p_contents','$p_user','$p_mid')") or die(mysql_error());
      header("Location: $PHP_SELF");
        }

[jetthe]

Ah, thanks for opening my eyes, apparently i missed the all-too-known: mysql_escape_string(htmlspecialchars(stripslashes($querydata)));

for application on my posted data, now it works like a charm and surely is secure and all =)
Thanks again,