Re: prevent user from getting scripts outside the web folder [this better?]
| From: | John Nichel | Date: | Fri, 14 Oct 2005 13:23:16 +0000 |
| Subject: | Re: prevent user from getting scripts outside the web folder [this better?] | ||
| References: | 1 2 3 4 5 6 7 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-224124@lists.php.net to get a copy of this message | ||
Marcus Bointon wrote:
On 14 Oct 2005, at 04:48, David Robley wrote:mysql_real_escape_string() takes into account the current characterset of the database. addslashes() does not. -- John C. Nichel ÜberGeek KegWorks.com 716.856.9675 john@kegworks.comThat is incorrect. mysql_real_escape_string is a php function, not mysql.Mostly true: mysql_real_escape_string is a php function, but it's provided by the mysql extension as part of the mysql client libraries (which explains the name). It doesn't do anything significantly different to addslashes(), which is purely a PHP internal function. If you are writing database independent code, you should probably prefer addslashes (or things like adodb::qstr).