Thank you VERY much Colin! I see exactly where I've been screwing up now
Could you please elaborate how/where I would include the globalise(), addslashes() or inval() functions?
If im thinking correctly, since my siteid will always be an int, I change my code from
$tempval = $_REQUEST['siteid'];
to
$tempval = intval($_REQUEST['siteid']);
Correct?
I would like to ask one more thing since im thinking about it...
How can I stop the results from being sent to the template if the requested siteid is either non-numeric, or an unknown value?
For example, if the user decided to try and send
index.php?siteid=1000000000000 or
index.php?siteid=thisisnotnumeric
since the database dont (and never will) have a site id of 1000000000000 and thisisnotnumeric is a text value, currently, both follow through correctly, but no data is sent to the template because the siteid dont exist.
I would prefer that the user is sent an error message instead of a blank template.
Thanks again for your time on the initial question at hand!
|