passing url variables

[ali_p]

Hello, i am trying to query a database by allowing the user to click on an option , in which there is a url variable. The results page ought to return all the records in the database that match the search but instead i get a blank.
this is the sql code that i am using

sql = "SELECT *
FROM jobs
WHERE division = '#url.division#'";

If anyone can see a problem i would appreciate it.
Thanks

[cahva]

Hmm..Thats not right at all. Why the #-signs?

$sql = "SELECT * 
FROM jobs 
WHERE division = '".$_GET['url_variable']."'";

Ofcourse the $_GET['url_variable'] is whats your select's name is..

[ali_p]

ah ah. ..
thank you very much.
i guess the '#' signs are remnants from my ColdFusion past life.

[________]

You may also want to take a look at the mysql_escape_Strin() function!
And you should also make a validation scrpt, that checks if the division exist.