php help

[oprpg]

Ok, let's say that you want to make it so that someone can type a query into a form. Let's say they type in "mysql_query("INSERT INTO blah SET blah='blah'");"

that field's name is umm, thus the variable would be something like $_POST['umm']

how would I run umm so that it inserts it into the query. I tried just $_POST[umm] but got a parse error. Any ideas?

[dalecosp]

Is magic quotes on? What does the query look like if you echo() it to the handler script...maybe it's fouled up in transit...

[ScubaDvr2]

Yeah.. do something like

$unclean_phrase = "Hi, {$_POST['umm']}!";