Query will not work! Argh!

[Darren884]

This query will not work, I have the connection established dont worry about that.

//See if there is a source where the customer came from.
if (!empty ($_SERVER['QUERY_STRING']))
{
    $query = "SELECT * FROM sources WHERE source = addslashes({$_SERVER['QUERY_STRING']})";
    if ($query_result = @mysql_query ($query))
    {
        $t = mysql_numrows ($query_result);
        if ($t != 0)
        {
            while ($row = @mysql_fetch_array ($query_result)) {
                $_SESSION['referrer'] = $_SERVER['QUERY_STRING'];
                echo "Yes!";
            $i++;
            }
        }
    }
    else
    {
        echo "Could not run the source query. Please email webmaster <a href=\"mailto:{$config['email']}?subject=Source Query Error On Page {$_SERVER['REQUEST_URI']}\">here</a>.";
        exit;
    }
} 

[medicjoe95]

$t = mysql_numrows ($query_result); 

Is incorrect, I'm pretty sure. It's it

$t = mysql_num_rows ($query_result); 

[mark_W]

You might be better of just catching your query string as a variable first. That how I would do it anyway as I could build the query easier. Others may not agree though.

[guido2004]

I don't think addslashes is a sql command, so instead of this:

$query = "SELECT * FROM sources WHERE source = addslashes({$_SERVER['QUERY_STRING']})"; 

you might try:

$query = "SELECT * FROM sources WHERE source = '".addslashes($_SERVER['QUERY_STRING'])."'";