[URGENT] _Get post into database (PHP)

Discussion in 'PHP' started by xDragonZ, Nov 27, 2010.

  1. #1
    I need help in storing this data into database but can ignore '&' or '$' ?

    http://name.com/file.php?q=111:capa...BblADacP70V290867620ZDiA0QQQQ; act=12579962/3



    <?php
    $var = $_GET['q'];
    $c = $_GET['c'];
    //echo base64_encode($var);
    function first(&$array) {
    if (!is_array($array)) return null;
    if (!count($array)) return null;
    reset($array);
    return key($array);
    }
    $con = mysql_connect("localhost","DB","PASS");
    if (!$con)
      {
      die('Could not connect: ' . mysql_error());
      }
    mysql_select_db("DBname", $con);
    $sql="INSERT INTO DATA (DATA , C)
    VALUES
    ('$var' , '$c')";
    
    if (!mysql_query($sql,$con))
      {
      die('Error: ' . mysql_error());
      }
    echo "ERROR . . .";
    
    mysql_close($con)
    
    
    
    ?> 
    <? echo $var ?> 
    
     <?php 
     $File = "logfile.txt"; 
     $Handle = fopen($File, 'w');
     fwrite($Handle, $var2); 
     print "Fail To Load"; 
     fclose($Handle); 
     ?>
    
    Code (markup):

     
    xDragonZ, Nov 27, 2010 IP
  2. DesktopUpload.com

    DesktopUpload.com Peon

    Messages:
    2
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Horrible code.

    First, you should use POST instead of GET.
    Second, try to base64_encode the source data prior to placing it in the URL.
     
    DesktopUpload.com, Nov 28, 2010 IP