[dokuwiki] Re: Is it possible to have a variable/parameter passed in a link?

  • From: Andy Webber <dokuwiki@xxxxxxxxxxxxxx>
  • To: dokuwiki@xxxxxxxxxxxxx
  • Date: Sat, 20 Mar 2010 11:17:27 +0000

Chris G wrote:
So I have a page with information about a town called Angers, I want
to have a link to a page which displays information about Angers from
a database, so the link from the Angers page somehow has to tell the
linked to page that the WHERE clause has to have 'Angers' in it.

No ideas, but whatever you do, please use a prepared/parametrised statement to avoid the risk of SQL injection <http://en.wikipedia.org/wiki/Sql_injection>.

Examples, depending on your database and how you access it:
<http://php.net/manual/en/function.odbc-prepare.php>
<http://php.net/manual/en/pdo.prepared-statements.php>
--
DokuWiki mailing list - more info at
http://www.dokuwiki.org/mailinglist

Other related posts: