Re: security.database.storage example is using addslashes() rather then pg_escape_string()
| From: | Etienne Kneuss | Date: | Wed, 12 Apr 2006 15:22:16 +0000 |
| Subject: | Re: security.database.storage example is using addslashes() rather then pg_escape_string() | ||
| References: | 1 | Groups: | php.doc |
| Request: | Send a blank email to phpdoc+get-969372665@lists.php.net to get a copy of this message | ||
Hannes Magnusson wrote :
> Hi
> >From the pg_escape_string() manual page: "pg_escape_string() escapes a
> string for insertion into the database. It returns an escaped string
> in the PostgreSQL format. Use of this function is recommended instead
> of addslashes()."
> And we are using addslashes() on
> http://www.php.net/manual/en/security.database.storage.php ? :)
>
Thanks for the patch!
--
Etienne Kneuss
http://www.colder.ch/
colder@php.net