Question

require("includes/connect.php");

            $result = mysql_query("SELECT * FROM entries", $link);

            while ($row = mysql_fetch_array($result)) {
                htmlentities($row['quotes']);
            }

I am trying to display data that is in the database, but I keep on getting:

Warning: mysql_real_escape_string() expects parameter 1 to be string

Is there anything wrong in the above code that is causing the problem? I am quite new to PHP and I am trying to understand what’s going on and why it’s doing it.

connect.php

$link = mysql_connect("localhost", "root", "");

    if (!$link) {
        die("Could not connect to the db");
    }

    mysql_select_db("ENTRIES",  $link);

(I’m working on this locally, so user/pass really isn’t important right now)

Answer 1

I don’t see the point with escaping the above query, but you could do it like this:

 $result = mysql_query(mysql_real_escape_string("SELECT * FROM entries"), $link);

You should read the documentation: mysql_real_escape_string()