PHP or MySQL is replacing certain string characters with gibberish in echoed output -


i have code query looks (yes, i'm aware input not sanitized):

$search_query = "select * `comments` comment '%".$_post['search_query']."'%"; 

but whatever reason when enter word 'fake' , echo back, comes out this:

select * `comments` comment '0.000000ake' 

i genuinely have no idea going on here. appreciated.

if possible sanitize input. echo string echo function. if have guess, somehow %fake% being printed printf or sprintf function (or similar) converting %f different.


Comments

Popular posts from this blog

cakephp - simple blog with croogo -

How to group boxplot outliers in gnuplot -

bash - Performing variable substitution in a string -