Re: MySql injections (related question)
| From: | James Williams | Date: | Thu, 12 May 2005 19:39:21 +0000 |
| Subject: | Re: MySql injections (related question) | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-215074@lists.php.net to get a copy of this message | ||
I'm pretty sure that, in order to use mysql_real_escape_string() you
must have magic quotes off or use stripslashes first... the same as
addslashes, so it should work if you just search and replace. Don't
quote me on that though
On 5/12/05, Richard Lynch <ceo@l-i-e.com> wrote:
> On Wed, May 11, 2005 8:27 pm, James Williams said:
> > On 5/11/05, Richard Lynch <ceo@l-i-e.com> wrote:
> >> Is mysql_real_escape_string *DIFFERENT* in some incredibly huge secure
> >> way
> >> that I want to stop working on all my current projects to go re-write
> >> the
> >> 10,000,000 lines of code?
> >
> > 2 words: Search & Replace.
>
> 2 words: Magic Quotes
>
> --
> Like Music?
> http://l-i-e.com/artists.htm
>
>
--
jamwil.com