Portfolio and mysqli_real_escape_string

Language: PHP
mysqli_real_escape_string

Language: PHP
$sql = "INSERT INTO course VALUES (LAST_INSERT_ID(), ';$cname';)";
$result = mysqli_query ($link, $sql);

Language: PHP
$sql = "INSERT INTO course VALUES (LAST_INSERT_ID(), ';$cname';)";
$sql = mysqli_real_escape_string($link, $sql);
$result = mysqli_query ($link, $sql);

Language: PHP
$first_name = mysql_real_escape_string($_POST[';fname';]);
 
similar to 
 
$first_name = htmlspecialchars($_POST[';fname';]);
 
$first_name = htmlentities($_POST[';fname';]);

Language: PHP
mysqli_real_escape_string

Language: PHP
htmspecialchars and mysqli_real_escape_string

Language: PHP
string mysqli_real_escape_string ( mysqli $link , string $escapestr ) // you used the sql query as the $escapestr - it should be the $var you want to insert

Language: PHP
$link = mysqli_connect("localhost", "my_user", "my_password", "registration");

Language: PHP
$page = parse_url($_SERVER[';HTTP_REFERER';],PHP_URL_PATH);
$page = basename($page);
 
....
 
if ($page == ';student_info.php';)
 {
           echo "<a href=\"list.php\"><b>redirect to list.php</b></a></p>";
}else{
            echo "<a href=\"student_man.php\"><b>redirect to student man</b></a></p>";
}