mysql_result isn't depreciated but here's a note from the PHP manual:

When working on large result sets, you should consider using one of the functions that fetch an entire row (specified below). As these functions return the contents of multiple cells in one function call, they're MUCH quicker than mysql_result().

__________________

Well then a tutorial I read was wrong, and I hate them all.

__________________
Wax on, Wax off

As Salathe said, it indeed is not depreciated. I use if for large queries. For example, when using queries like "LIKE" and "WHERE".

__________________

"Life is a bitch, take that bitch on a ride"

I've just created another guest book with the same code for practice. I'll probably do it a few times until I can write it from memory. I do have one questions though. Some one told me when setting the variables from the form, to use this:

The only thing with that is, when it's submitted it's displaying the email and website like bellow:

Now, I could fix it by removing the urlencode, addslashes and htmlentities, but I was told to add that in. Do I really need it?

You can use the function urldecode() to decode your encoded URL string. I've never used it on an email or such but that's me. addslashes() should suffice. And those can be decoded with stripslashes() as you might know. addslashes() only escapes quote tags and such. For extra security, I advice you to use mysql_real_escape_string for your queries and even sprintf() if you want to be on the safe side.

__________________

"Life is a bitch, take that bitch on a ride"

Thanks for your reply.

At first read that made no sense to me what so ever. After a second time things started to click! I had been using addslashes to encode all of the fields, however, I didn't know how to (or that I had to) decode them. I've now used stripslashes and urldecode to decode the strings.

I've also used mysql_real_escape for my queries but haven't heard of sprintf() before.

PS: How easy is it to make a variable a hyperlink?

Wildhoney has written a great article about securing queries with sprintf() - TalkPHP - Securing your MySQL Queries with Sprintf

As for making a variable into a hyperlink, I'm not sure what you mean, but:

Hopefully one of those is what you where after?

Alan

Thanks Alan, I'll have a read over that article!

I'm not sure if the hyperlink thing is possible, but I'll try and explain what I'm looking for: I have a name field and a website field in the form. The data entered in those fields are stored as variables and entered into a database. I then display the information on another page.

When clicking the persons name, I would like that to link to the website they entered in form. This is an example, but totally wrong:

Basically, linking the persons name to the value stored in the variable.

<a href="<?=$website;?>" alt="" ><?php echo $guestsname; ?></a>

Would work..I believe

Thank you. When I link that, it's trying to access the page through localhost, which means it's not finding it. Why's it doing that?

__________________
My Personal and Photo Blog