rockwood

bind your values best way

yes, you have a valid point and i am agree with your comments. as per my view a change is required in old db class something like new update. it is not very hard to do

are you sure about this ?? please Compare both db classes

Best of Luck

Good Luck Script47

1. The MCC db class not looking enough as per my view so i added as suggestion. 2. for use have to recode every query and lots of changes. and i tested this is working 100% perfectly

if (!empty($_POST['name'])) { $_POST['name'] = filter_var($_POST['name'], FILTER_SANITIZE_STRING); }else{echo "Error";} i am sanitizing

isset and empty both are different

HTML5 having inbuilt validation

Mccodes db class is old (also not escaping values properly by Old MCC) so i think it is bit better mysql.class.txt

Good Luck Grant

sorry, i got answer

keep it on guyz good job

good worked and looking clean Best of luck MNG

me too facing this problem what should i do for remove this error???

KyleMassacre's " !=" or you can use of "<>" bcz both having same mean not equal to $q=mysql_query("SELECT im.*, i.*, u.*,it.* FROM itemmarket im LEFT JOIN items i ON im.imITEM=i.itmid LEFT JOIN users u ON u.userid=im.imADDER AND i.itemtypeid <> "item id goes here");

i am leaving this thread.

Dominion you should check posts chain, i tried to improve his code and he told me escaping is wrong on $_GET variable the question from his side, not from mine and i am trying to explain him about xss attacks and what is wrong in it ??

my point was only safety nothing else friend ,that was just an example for validating you can use preg_match too and many more so please make it safe bcz get is non hide thing

if you dont mind why ??? bcz i wanna gain my knowledge so may be it help me ? - - - Updated - - -   am wrong on this point HD ?

please see the Alan and !Angel Post on this page "http://makewebgames.io/showthread.php/43753-Boolean-Given?p=294236#post294236" epically $_GET value validation by ctype_digit()

your escape functions are doing properly sanitize and validate ??? and what are you doing for xss ? as per my view it is very important part of programming and i am not expert in these but little bit aware about these problem as per my view it is doesn't matter that you handle values by db or hard code so please try to escape your values properly, this is my point.

Thanks it is awesome

i am not good in english but as my understanding you have to make database in your mysql

i am saying about sprintf