Re: SQL Injection attack
| From: | Jordan Miller | Date: | Thu, 25 Aug 2005 19:21:05 +0000 |
| Subject: | Re: SQL Injection attack | ||
| References: | 1 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-40138@lists.php.net to get a copy of this message | ||
NOTE:
http://www.php.net/mysql_escape_string
"Version: 4.3.0
Description: This function became deprecated, do not use this function. Instead, use mysql_real_escape_string()."
Jordan
On Aug 25, 2005, at 2:15 PM, <tg-php@gryffyndevelopment.com> <tg-php@gryffyndevelopment.com> wrote:
Using mysql_escape_string should be good enough by itself.