查询字符串通过$ _GET方法传递

Question

I want to pass sValue that contain non-English String

  ....
 $.post("ajax.php?module=test&action=updates&id="+id+"&field="+field+"&val="+sValue;                                    
...

Then

$valUpdate = $_GET['val'];
$sQuery = " UPDATE $sTable SET  $colUpdate = '$valUpdate' WHERE  id = $id";
    $req = $pdo->prepare($sQuery);
    $req->execute();
    $req->closeCursor();

Anyone could told me ,How can I fix this ?

thanks

Answer 1

You should use encodeURIComponent(sValue).

Also consider using some kind of SQL-injection free syntax like prepared statements.