Getting data from form via php into mysql

[sjambok]

I've done it before... on a different site.
Set up all the test enviorns I could... no change, no clue.
No .htaccess to block any transactions.. at least what I could see up to the root level.

Get the following in the url, before even getting to the update /insert coding I'm wanting to do.
(end of coding line.

admin/%3C?BS();?%3E


Calling code that *seems* to be calling it:

        echo "<td>";
        echo "<a href='Invoice.php?id=$id'>View&nbsp;Invoice</a><br/><br/>\n";
        echo "<a href='Packing.php?id=$id'>Packing&nbsp;Slip</a><br/><br/>\n";
        echo "<input name='sub17' type='submit' value='Update Data'></form>";
        echo "</td>";
        echo "</tr>\n";
 

Have something similar in three othere files, but on a different host.


Simplistic update statement in the "BS" function:

     $upShi="UPDATE ActualShipping SET OrderID=$id,actualShipCost=$ASC,trackingNbr='$trNum'";

Just to give INSERT its due, I tried it and got the same exact error with the same exact gobbly gook

    $Ishi="INSERT INTO ActualShipping (OrderID,actualShipCost,trackingNbr) 
    VALUES=($id,$ASC,'$trNum')";

[Please use CODE tags when posting source code. Thanks! --pbmods]

Get the ugly FORBIDDEN error.

Any ideas?? Wheels are spinning, not going anywhere, about ready to fall off.

thanks heaps (hopefully)

[pbmods]

Heya, sjambok. Welcome to TSDN!

Make sure your admin script has read (and execute, on *n?x systems) permissions.