Bug #14419 Updated: Please use Character-enable mysql_escape

ID: 14419 Updated by: georg@php.net Reported By: ycheng@sinica.edu.tw -Status: Assigned +Status: Closed Bug Type: MySQL related Operating System: All PHP Version: 4.1.0 Assigned To: zak New Comment: Thank you for your bug report. This issue has already been fixed in the latest released version of PHP, which you can download at http://www.php.net/downloads.php Since Version 4.0.2 we have the php function mysql_real_escape_string. The function mysql_escape_string is deprecated. (Also described in the manual) Georg Previous Comments: ------------------------------------------------------------------------ [2001-12-31 19:11:55] zak@php.net Thanks for the suggestion! I will investigate this. ------------------------------------------------------------------------ [2001-12-11 03:41:15] ycheng@sinica.edu.tw in file php-4.1.0/ext/mysql/php_mysql.c line 1365 ------------------------------- Z_STRLEN_P(return_value) = mysql_escape_string(Z_STRVAL_P(return_value), Z_STRVAL_PP(str), Z_STRLEN_PP(str)); ------------------------------- could you change from mysq_escape_string into mysql_ to something like #if MYSQL_VERSION_ID < 32321 len = mysql_escape_string(out, in, size); #else if (self) { check_connection(self); len = mysql_real_escape_string(&(self->connection), out, in, size); } else len = mysql_escape_string(out, in, size); #endif (quote from mysql python module) ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=14419&edit=1