Quote:
Originally Posted by cashpath
Does this still work?
I put this..
Code:
$vbulletin->input->clean_array_gpc
('g', array(
'year' => TYPE_UINT,
'week' => TYPE_UINT,
'teamid' => TYPE_UNIT,
'team_ident' => TYPE_UNIT,
'pid' => TYPE_UINT,
'page' => TYPE_NOHTML));
$team_ident=$vbulletin->GPC['team_ident'];
And when I pass
Code:
{url}?team_ident=thisisatest
I get a mysql error
Code:
Invalid SQL:
SELECT * FROM table_teams WHERE id=thisisatest
|
a lil too late

yes, works!
try this out:
PHP Code:
$vbulletin->input->clean_array_gpc('g', array(
'year' => TYPE_INT,
'week' => TYPE_INT,
'teamid' => TYPE_INT,
'team_ident' => TYPE_INT,
'pid' => TYPE_INT,
'page' => TYPE_NOHTML));
$team_ident = $vbulletin->GPC['team_ident'];
HTML Code:
{url}?team_ident=$team_ident
OR
HTML Code:
{url}?team_ident=$vbulletin->GPC['team_ident']
also, escape ur mysql statement:
Code:
SELECT * FROM table_teams WHERE id = " . $db->escape_string($vbulletin->GPC['team_ident']) . "