php - Error INSERTING Array With Form Validation -


i have 3 queries form validation tag system using mysqli. .what best practice escape $tag_no array. .when $tag_no array passed form integers passed strings, is_int not work $tnumber, ideas? .is overall best practice validating array of tags passed form.

hope clear , concise, appreciated. in advance.

$tag_no = $_get['tno']; $tno = mysqli_real_escape_string($link, $tag_no);  if ($tag_no != false) {    $query = "insert `uc` (`uno`, `bno`) values ('$uno', '$box');";    foreach ($tag_no $tnumber) {       if (is_int($tnumber)) {          $query .= "          insert `ut` (`uno`, `tno`) values ('$uno', '$tnumber')";       } else {          $query .= "insert tags (tname) values ('$tagname')";        }    }; }; mysqli_multi_query($link, $query); 

even if use mysql_multi_query() you'll have use ';' separate indivdual queries.

so change code to:

foreach ($tag_no $tnumber) {     if (is_int($tnumber)) {         $query .= "         insert `ut` (`uno`, `tno`) values ('$uno', '$tnumber');"; # <-- note ;     } else {          $query .= "insert tags (tname) values ('$tagname');"; # <-- note ;     }  } 

also i'm pretty sure, fail:

 foreach ($tag_no $tnumber) 

as $tag_no string , foreach expects array. (you've used mysqli_real_escape_string().)


Comments

Popular posts from this blog

node.js - Bad Request - node js ajax post -

Why does Ruby on Rails generate add a blank line to the end of a file? -

keyboard - Smiles and long press feature in Android -