Bug #54437 [NEW]: mysql_real_escape_string don't escape: \x00, \n, \r and \x1a

From: Operating system: Any PHP version: 5.3.6 Package: MySQL related Bug Type: Bug Bug description:mysql_real_escape_string don't escape: \x00, \n, \r and \x1a Description: ------------ mysql_real_escape_string don't escape: \x00, \n, \r and \x1a as is mentioned in documentation: http://co.php.net/manual/es/function.mysql-real-escape-string.php and \r in a quote string in a insert into query, is a syntax error, I'm handling binary data (PDF Files). Tested on Windows XP SP3 with PHP builds from PHP, and Centos 5.5 with personal configure, both using PHP 5.3.6 and in Windows, MySQL Server version is 5.5.8-log and Centos is 5.0.77-log Client API version mysqlnd 5.0.8-dev - 20102224 - $Revision: 308673 $ Test script: --------------- $link = @mysql_pconnect("localhost","root",""); if (!$link) { die('Not connected : ' . mysql_error()); } echo "\\x00, \\n, \\r, \\, ', \" and \\x1a."; echo "<br />\r\n"; print mysql_escape_string("\x00, \n, \r, \, ', \" and \x1a."); Expected result: ---------------- \x00, \n, \r, \, ', " and \x1a. \\x00, \\n, \\r, \\, \', \" and \\x1a. Actual result: -------------- \x00, \n, \r, \, ', " and \x1a. \0, \n, \r, \\, \', \" and \Z. -- Edit bug report at http://bugs.php.net/bug.php?id=54437&edit=1 -- Try a snapshot (PHP 5.2): http://bugs.php.net/fix.php?id=54437&r=trysnapshot52 Try a snapshot (PHP 5.3): http://bugs.php.net/fix.php?id=54437&r=trysnapshot53 Try a snapshot (trunk): http://bugs.php.net/fix.php?id=54437&r=trysnapshottrunk Fixed in SVN: http://bugs.php.net/fix.php?id=54437&r=fixed Fixed in SVN and need be documented: http://bugs.php.net/fix.php?id=54437&r=needdocs Fixed in release: http://bugs.php.net/fix.php?id=54437&r=alreadyfixed Need backtrace: http://bugs.php.net/fix.php?id=54437&r=needtrace Need Reproduce Script: http://bugs.php.net/fix.php?id=54437&r=needscript Try newer version: http://bugs.php.net/fix.php?id=54437&r=oldversion Not developer issue: http://bugs.php.net/fix.php?id=54437&r=support Expected behavior: http://bugs.php.net/fix.php?id=54437&r=notwrong Not enough info: http://bugs.php.net/fix.php?id=54437&r=notenoughinfo Submitted twice: http://bugs.php.net/fix.php?id=54437&r=submittedtwice register_globals: http://bugs.php.net/fix.php?id=54437&r=globals PHP 4 support discontinued: http://bugs.php.net/fix.php?id=54437&r=php4 Daylight Savings: http://bugs.php.net/fix.php?id=54437&r=dst IIS Stability: http://bugs.php.net/fix.php?id=54437&r=isapi Install GNU Sed: http://bugs.php.net/fix.php?id=54437&r=gnused Floating point limitations: http://bugs.php.net/fix.php?id=54437&r=float No Zend Extensions: http://bugs.php.net/fix.php?id=54437&r=nozend MySQL Configuration Error: http://bugs.php.net/fix.php?id=54437&r=mysqlcfg