Re: Serialize
| From: | chris smith | Date: | Wed, 24 May 2006 10:22:56 +0000 |
| Subject: | Re: Serialize | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236813@lists.php.net to get a copy of this message | ||
On 5/24/06, phplist@f2s.com <phplist@f2s.com> wrote:
Hi, Is a serialized array a "safe" string to insert into a mysql text field? Or is a function such as mysql_real_escape_string always needed?*Always* escape your data. What if your array contains a quote? -- Postgresql & php tutorials http://www.designmagick.com/