Re: Serialize
| From: | Robin Vickery | Date: | Wed, 24 May 2006 10:40:30 +0000 |
| Subject: | Re: Serialize | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-236815@lists.php.net to get a copy of this message | ||
On 24/05/06, phplist@f2s.com <phplist@f2s.com> wrote:
Hi, Is a serialized array a "safe" string to insert into a mysql text field? Or is a function such as mysql_real_escape_string always needed?No, it's not at all a safe string to insert into a mysql text field. mysql_real_escap_string() is needed. -robin