[RESOLVED] Using POST within query

[fotofx]

OK, I am sure I have the syntax screwed up on this. I am setting up a query and want to use POST data as the WHERE.

This is wrong, How should it be formed?

WHERE
`orders`.`departure_date` BETWEEN  $_POST['from_date'] . '00:00' AND $_POST['to_date'] . '23:59'

Thanks
Steve

[NogDog]

Looks like it's probably a quoting issue. Also, you should be sanitizing your post data against SQL injection. Assuming the MySQL extension:

$fromTime = mysql_real_escape_string($_POST['from_date']) . ' 00:00';
$toTime = mysql_real_escape_string($_POST['to_date']) . ' 23:59';
$query = "SELECT . . . WHERE `departure_date` BETWEEN '$fromTime' AND '$toTime'";

[fotofx]

Yup... That worked..

Thanks again,
Steve