Re: Regular Expressions?
| From: | Richard Lynch | Date: | Sat, 09 Apr 2005 02:34:11 +0000 |
| Subject: | Re: Regular Expressions? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-212692@lists.php.net to get a copy of this message | ||
On Fri, April 8, 2005 3:43 pm, list_php_general@controlaircorp.com said:
> I am looking for help handling a form input to SQL. I believe the solution
> has to do with regular expressions.
> My big problem is that when a user submits data such as:
>
> Joe's Crabshack
>
> The ' apostrophe or " can cause an early truncation of the data. My code
> thinks that the closing identifier is after the word Joe and the rest of
> the input is lost. Further, if the data does get by and it could possibly
> break a SQL statement.
>
> Am I right in thinking the solution in this matter is using regular
> expressions? If so, where is a good resource to polish my skills?
You would be far better off using the built-in mysql_escape_string (recent
PHP versions) or http://php.net/addslashes
You might want to try to use Regex as an exercise, but this ain't the
place for it on a real site.
--
Like Music?
http://l-i-e.com/artists.htm