search

[1zeus1]

I do a search in a database with full text
$ search = $ _GET ['q'];

$construct ="SELECT *, MATCH(cw,sw,,pforte) AGAINST('". $search ."' IN BOOLEAN MODE) AS tot FROM sitist WHERE MATCH(cw,sw,,pforte)
AGAINST ('". $search ."' IN BOOLEAN MODE) ORDER BY tot DESC LIMIT 0 , 30";

My problem is that:
If $ search = kijiji.com or google.com, .....
In boolean mode I delete point "." and as if
$ search = kijiji com or google com, .....
What I put do to search even point?

Regards,cristian

[dalecosp]

$ search = $ _GET ['q'];

Ouch! What if someone does:

http://yoursite.com/search?q=drop%20table%20user

or similar?

As for your original question, would [man]mysql_real_escape_string[/man] help?

It appears to me you should use that and perhaps even more processing on $_GET['q'] before querying the DB anyway ... for security purposes.