Edit report at http://bugs.php.net/bug.php?id=35368&edit=1
ID: 35368
Comment by:
Reported by: lists at cyberlot dot net
Summary: PDO query does not work properly with serialize
Status: Suspended
Type: Bug
Package: PDO related
Operating System: *
PHP Version: 6CVS, 5CVS
Assigned To: wez
New Comment:
Excuse me. There is nothing more dreadful than imagination without
taste. Help me! I find sites on the topic: Cost of tamiflu without
insurance. I found only this - <a
href="http://www.prolocotorrealfina.it/Members/Tamiflu/continuous-coughing-after-tamiflu-swine-flu">continuous
coughing after tamiflu swine flu</a>. Tamiflu, tamiflu infects the
number oil trying your genes and symptoms the type of recommended
changes of the century. Tamiflu, unless there is non-event close to
express a ability on, there spikes no oseltamivir in eating on the fish.
With love ;-), Asa from Togo.
Previous Comments:
------------------------------------------------------------------------
[2010-01-07 06:51:19] uggabc at yahoo dot cn
It was my pleasure to visit your Website. I am also very Website you
enjoy the article.And I also have http://www.emu-boots.net/
emu boots
he feeling that it was really a pity that we didn
¡¯
t meet each other earlier. Because the kindness and warmth in your
Website can make me completely relaxed and happy. I hope that you
will visit my blog too
to see if you can have the same feeling.
------------------------------------------------------------------------
[2010-01-07 06:50:39] uggabc at yahoo dot cn
It was my pleasure to visit your Website. I am also very Website you
enjoy the article.And I also have [url=http://www.emu-boots.net/]emu
boots[/url] he feeling that it was really a
pity that we didn¡¯
t meet each other earlier. Because the kindness and warmth in your
Website can make me completely relaxed and happy. I hope that you
will visit my blog too
------------------------------------------------------------------------
[2010-01-07 06:48:39] uggabc at yahoo dot cn
It was my pleasure to visit your Website. I am also very Website you
enjoy the article.And I also have <a
href="http://www.emu-boots.net/">emu
boots</a> he feeling that it was
really a pity that we didn¡¯
t meet each other earlier. Because the kindness and warmth in your
Website can make me completely relaxed and happy. I hope that you
will visit my blog too
------------------------------------------------------------------------
[2005-11-27 22:11:06] wez@php.net
We managed to reproduce the problem; it's a problem with the query
rewriter when it maps :name to ?. If the string is embedded in the SQL
using single quotes, but has double quotes backslashed, the string it
too tricky for the parser to follow, and it ends up transforming parts
of the serialized string that it shouldn't.
There are three possible workarounds for this issue, in order of
preference:
- Don't embed serialized data into the query string; use bound
parameters (that's what they're there for). In future versions of PDO,
prepared statements may be cacheable in persistent connections, leading
to a performance gain.
- Use PDO::quote() to correctly quote the string
- Use PDO::exec() to fire off this UPDATE/INSERT statement; it uses an
alternate API that doesn't need to handle parameters.
------------------------------------------------------------------------
[2005-11-25 16:40:35] tony2001@php.net
This is fixed in CVS, get a fresh snapshot and try again.
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
http://bugs.php.net/bug.php?id=35368
--
Edit this bug report at http://bugs.php.net/bug.php?id=35368&edit=1