[RESOLVED] update data from form

[fasmy98]

Do we need to define variable in update form?

update.php

Tajuk:<input type="text" name="tajuk" size="55" style="color: Navy; font-family: Verdana;" onKeyUp="javascript:this.value=this.value.toUpperCase();" value="<? echo $row['tajuk']; ?>" />

Ringkasan:
<textarea name="ringkasan" cols="40" rows="5" style="color: Navy; font-family: Verdana;" id="ringkasan" onKeyUp="javascript:this.value=this.value.toUpperCase();"><? echo $row['ringkasan']; ?></textarea>

update2.php

<?

$link = mysql_connect( 'localhost', 'root', '' );

use database

mysql_select_db('bpsm') or die("cannot select DB");

$id=$_GET['id'];
echo $id;

// update data in mysql database

$sql="UPDATE berita SET tajuk='$tajuk', ringkasan='$ringkasan', WHERE id='$id'";
$result=mysql_query($sql);

?>

[Kudose]

fasmy98 wrote:

Do we need to define variable in update form?

ALWAYS define your variables. Otherwise a hacker can severly damage you by injecting SQL attacks via URL.