Re: prevent user from getting scripts outside the web folder [this better?]

On Fri, October 14, 2005 8:20 am, John Nichel wrote: > David Robley wrote: >> Ben wrote: > <snip> >>>My understanding is that mysql_real_escape_string will only work >>> while >>>you are connected to mysql. Not sure if that is the case in your >>>situation. >> >> >> That is incorrect. mysql_real_escape_string is a php function, not >> mysql. > > Actually, it's both. And yes, you *do* have to be connected to the > mysql server. There is, however, mysql_escape_string() which does not require a connection -- but which also can't take into account the language/locale settings *OF* the connection, which is why it's not a "real" escape. It might, however, be useful in some circumstances. I missed the beginning of this thread, so apologies it that's a repeat. -- Like Music? http://l-i-e.com/artists.htm