Quote:
Originally Posted by Smarty
Code:
$avatar = blah blah
$quote = blah Blah
mysql_query(UPDATE 'whatever' SET avatar = $avatar, quote = $quote and so on ... WHERE id = id ..)
make sure that when you show them teh form .. the values that are in teh database already shown in teh form .. and when they update something you just update all teh values.
Also teh script is a drama .. because you allow teh users to put everything in your database without any checking .. at least do a mysql escape on the posted vars.
|
The script has been a pain in the arse ever since we purchased it and the guy that scripted it has given us no support what so ever. We ended up having to pay another coder for a load of bug fixes in the end..but thats life and nothing is ever easy..lol
Thanks for all your help guys