form data missing

[daryllamble]

Hi all,

Not sure if anybody has asked this before but this one has got me stumped.

I have a texarea which gets dumped into a posgresql table via a POST from a form.

The problem i have is that sometimes the form data is missing when the post is done. Should i be striiping certain characters fron the text area before inserting into the database.

Thanks all for your time and patience.

Daryl

[cahva]

I havent used Postgresql but in mysql we use mysql_real_escape_string() and theres the equivalent function for postgresql which is pg_escape_string().

Usually the input which has ' or " can break the query and thats where those funtions come in. They also help to preven sql-injection attacks so use them(or it) 🙂

Althought dont rely on it too much incase of injection attacks.. So do proper checks anyways..