COMMON MISTAKE: –
Make sure you connect to database before you use mysql_real_escape_string, otherwise it will not get the passed variable.
1 2 3 4 5 |
include('dataconn.inc'); $reportclient = mysql_real_escape_string($_POST['reportclient']); |