Re: Serialize
| From: | Andrei | Date: | Wed, 24 May 2006 10:27:29 +0000 |
| Subject: | Re: Serialize | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236814@lists.php.net to get a copy of this message | ||
It's not safe... if the array contains strings which contain ' or " might screw your query... it's safe to escape the string result from serialize...
Andy
phplist@f2s.com wrote:
Hi, Is a serialized array a "safe" string to insert into a mysql text field? Or is a function such as mysql_real_escape_string always needed? regards Simon.