Mysql_error() is useful for programmer to know what is exactly error is. But sometime it is big clue for hackers to know about database structure. We can use mysql_error() in working time but it is good to hide mysql_error in published website. Here I write one simple tricks :
first create function :
function sql_failure_handler($error){return “Database Error”;}
call it like :
$result=mysql_query($sql) or die(sql_failure_handler(mysql_error()));