TalkPHP - View Single Post - $_POST: Are both approaches equally good?

Dave · 10-28-2009, 01:23 AM

Take a look at the code below regarding POST. Which is better?

PHP Code:


			
$sql = "SELECT   teachername

               , statecourse

               , semester

               , meetingcode

               , last_name

               , first_name

          FROM $c_tblname

         WHERE teachername = \"{$_POST['teachername']}\" and

               semester    = \"{$_POST['semester']}\"    and

               meetingcode = \"{$_POST['meetingcode']}\" ";



//------------------------------------------



extract ($_POST) ;

$sql = "SELECT   teachername

               , statecourse

               , semester

               , meetingcode

               , last_name

               , first_name

          FROM $c_tblname

         WHERE teachername = '$teachername' and

               semester    = '$semester'    and

               meetingcode = '$meetingcode' ";

Thanks!

10-28-2009, 01:23 AM	#1 (permalink)
Dave The Acquainted Join Date: Apr 2008 Posts: 110 Thanks: 97	$_POST: Are both approaches equally good? Take a look at the code below regarding POST. Which is better? PHP Code: $sql = "SELECT teachername , statecourse , semester , meetingcode , last_name , first_name FROM $c_tblname WHERE teachername = \"{$_POST['teachername']}\" and semester = \"{$_POST['semester']}\" and meetingcode = \"{$_POST['meetingcode']}\" "; //------------------------------------------ extract ($_POST) ; $sql = "SELECT teachername , statecourse , semester , meetingcode , last_name , first_name FROM $c_tblname WHERE teachername = '$teachername' and semester = '$semester' and meetingcode = '$meetingcode' "; Thanks!