[PHP] Grabbing row data via ID

Quote:

---

$id = $_GET['id'];

---

Escaping user input makes you look cool. No, really.
Also, escape both the domain and username, because someone may get smart and put some SQL stuff as a username ;]

Slowpoke is slow, but

Code:

---

$result = mysql_query("SELECT 'id', 'dname', 'exp_date', 'note' FROM `domain` WHERE id='".$id."' AND username = '".$session->username."'"); or die(mysql_error());

---

Didn't work because of the ;
Etc.
Hope this helps, somehow ;P


[Fd]

PHP Code:

---

$id = $_GET['id']; 


---

on my old system it worked without the above - thats why i didnt think of it as a problem