Query String

Anon

Hello,

I have a html form, that has input fields for username,password and servicename(Oracle 8 style)plus a textarea for a query string. These are then passed to a script that returns the data. I am using OCI8.dll.

This works fine for :
select * from $table_name

However if I try:
select * from $table_name where field = 'whatever'

I get an OCIStmtExecute: ORA-00911: invalid character error. Obviously, the quotes need to be escaped, but i'm not sure how.

Could anybody help in this matter.

Thank you in advance.

frewuill

it should work just like that, just check for special characters on "whatever" and check for reserved words on fields names too.

You can use :

$query = "select * from $table_name where field = 'whatever'";

$query = "select * from $table_name where field = \"whatever\"";

hope this helps.

jcleary

You can use addslashed() to do this for you.

jcleary

oops: typo - should be addslashes()

Anon

Thanks for the pointer. The answer was actually stripSlashes().

Thank you for taking the time.

Rob

Anon

Ok so this post isnt Oracle related, but it still concerns query strings 🙂.

the answer to this is probably extremely simple but I can't seem to find and answer in the PHP manual. quite simply, how do you take a query string and search for it in a database.

the context i am using it in (or trying to use it) is i have a database which holds link locations (linksD😎. it has one table (links) which has 2 fields (id, URL). so say the following query string was passed (http://www.woteva.com/link.php3?id=4) how do i take the ID from the query string and use it to query the database for the selected id, then pass the corresponding value of the URL field to the browser.

thank you all in advance

Robin Tibbs

jcleary

If you mean that youve got this as a string

http://www.woteva.com/link.php3?id=4

then you can used parse_url() followed by urldecode(). There is an example in the manual (I've not done it myself)

To then pass the url to the browser, use the header function like this

header("Location: $target_url");

Do not print any stuff before this, because it wont work if you do. This will do a full redirect. If you dont want a redirect, but would rather to just show the contents of the target url, you can fopen it, and echo its contents out.

$fh = fopen($target_url);

while ......

fclose($fh)