PHP or MySQL is replacing certain string characters with gibberish in echoed output -
i have code query looks (yes, i'm aware input not sanitized):
$search_query = "select * `comments` comment '%".$_post['search_query']."'%"; but whatever reason when enter word 'fake' , echo back, comes out this:
select * `comments` comment '0.000000ake' i genuinely have no idea going on here. appreciated.
if possible sanitize input. echo string echo function. if have guess, somehow %fake% being printed printf or sprintf function (or similar) converting %f different.
Comments
Post a Comment