Re: PHP mysql_excape but need to search for those items [message #178362 is a reply to message #178360] |
Mon, 11 June 2012 17:01 |
mrgushi
Messages: 3 Registered: June 2012
Karma:
|
Junior Member |
|
|
Jerry,
This is what I'm working with so far.
not sure if I've escaped everything I needed too.
$ENG = mysql_real_escape_string($ENG);
$result = mysql_query("SELECT * FROM br_test WHERE ENG LIKE '$ENG' ");
$row = mysql_fetch_array( $result );
The $ENG is the input from the search form..
The JS problem is valid but then again it will be in a locked down iOS
app using PhoneGAp. An I'll be using a HTTPs tunnel to the PHP
scripts.. use some sort of cookie with a SSL flag to lock it down. So
someone could JailBreak an iOS app and dig down in my settings and
figure out the JS but I don't think that likely but ur right I want to
take every precaution.
-dw
|
|
|