Re: Automatically Escape?
| From: | Jordi Canals | Date: | Tue, 16 Nov 2004 13:34:43 +0000 |
| Subject: | Re: Automatically Escape? | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-202134@lists.php.net to get a copy of this message | ||
On Tue, 16 Nov 2004 12:33:15 +0000, Richard Davey <rich@launchcode.co.uk> wrote:
> G> Is there a function that can automatically escape special characters
> G> before putting them into mySQL?
>
> See magic_quotes to have it done for you. Although this isn't a
> recommend approach if you plan to distribute your application, in
> which case mysql_escape_string() is the one.
Just a comment :
Note: This function (mysql_escape_string) has been deprecated since
PHP 4.3.0. Do not use this function. Use mysql_real_escape_string()
instead.
So, if you're coding new scripts is better to use mysql_real_escape_string().
Best regards,
Jordi.