php - Error INSERTING Array With Form Validation -
i have 3 queries form validation tag system using mysqli. .what best practice escape $tag_no array. .when $tag_no array passed form integers passed strings, is_int not work $tnumber, ideas? .is overall best practice validating array of tags passed form.
hope clear , concise, appreciated. in advance.
$tag_no = $_get['tno']; $tno = mysqli_real_escape_string($link, $tag_no); if ($tag_no != false) { $query = "insert `uc` (`uno`, `bno`) values ('$uno', '$box');"; foreach ($tag_no $tnumber) { if (is_int($tnumber)) { $query .= " insert `ut` (`uno`, `tno`) values ('$uno', '$tnumber')"; } else { $query .= "insert tags (tname) values ('$tagname')"; } }; }; mysqli_multi_query($link, $query);
even if use mysql_multi_query() you'll have use ';' separate indivdual queries.
so change code to:
foreach ($tag_no $tnumber) { if (is_int($tnumber)) { $query .= " insert `ut` (`uno`, `tno`) values ('$uno', '$tnumber');"; # <-- note ; } else { $query .= "insert tags (tname) values ('$tagname');"; # <-- note ; } } also i'm pretty sure, fail:
foreach ($tag_no $tnumber) as $tag_no string , foreach expects array. (you've used mysqli_real_escape_string().)
Comments
Post a Comment