$_POST: Are both approaches equally good?

Dave · 10-28-2009, 01:23 AM

Take a look at the code below regarding POST. Which is better?

PHP Code:


			
$sql = "SELECT   teachername

               , statecourse

               , semester

               , meetingcode

               , last_name

               , first_name

          FROM $c_tblname

         WHERE teachername = \"{$_POST['teachername']}\" and

               semester    = \"{$_POST['semester']}\"    and

               meetingcode = \"{$_POST['meetingcode']}\" ";



//------------------------------------------



extract ($_POST) ;

$sql = "SELECT   teachername

               , statecourse

               , semester

               , meetingcode

               , last_name

               , first_name

          FROM $c_tblname

         WHERE teachername = '$teachername' and

               semester    = '$semester'    and

               meetingcode = '$meetingcode' ";

Thanks!