Re: error
| From: | Karl DeSaulniers | Date: | Fri, 08 Apr 2011 05:45:08 +0000 |
| Subject: | Re: error | ||
| References: | 1 2 3 4 | Groups: | php.db |
| Request: | Send a blank email to php-db+get-47753@lists.php.net to get a copy of this message | ||
Hi Chris,
I believe you only need to do a htmlspecialchars when displaying data
as readable text that your retrieved from the database after inserting.
And probably some other situations as well, but I don't think you need to do htmlspecialchars on the
mysql_real_escape data when inserting into the database.
HTH,
Best,
On Apr 8, 2011, at 12:13 AM, Chris Stinemetz wrote:
mysql_real_escape_string(htmlspecialchars(Karl DeSaulniers Design Drumm http://designdrumm.com