I tried a lot suggestions at other people\'s threats about the same problem, but they didn\'t work. Can anyone see what I\'m doing wrong?
Part of my form:
try this
file";
exit;
}
if(!get_magic_quotes_gpc())
{
$fileName = addslashes($fileName);
$filePath = addslashes($filePath);
}
$title = $_POST['title'];
$description = $_POST['description'];
$query = "INSERT INTO ".$user_pictures." (file, title, description) VALUES ('".$filePath."', '".$title."', '".$description."')";
mssql_query($query);
}
?>