Re: OO woes
| From: | Matthew Sims | Date: | Mon, 12 Jul 2004 22:52:20 +0000 |
| Subject: | Re: OO woes | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-190300@lists.php.net to get a copy of this message | ||
> Your problem has nothing to do with the Objects (or really even PHP for
> that matter). You're not supposed to run mysql_escape_string on an
> entire query.
Yup, you are correct, my bad.
So I ran my $_POST array into array_map before the injection:
$_POST = array_map("mysql_escape_string","$_POST");
And it all worked on nicely.
--Matthew Sims
--<http://killermookie.org>