Escaping quotes for DB Entry

From: Date: Fri, 26 May 2006 14:41:49 +0000
Subject: Escaping quotes for DB Entry
Groups: php.general 
Request: Send a blank email to php-general+get-236950@lists.php.net to get a copy of this message
All... A lot has been said recently about the dangers of the family of magic_quotes... I understand the dangers. The question is, for those of us using a database that does not have a *real_escape_string function...Oracle for example. What is the *best* way to escape quotes for DB insertion? It seems that addslashes gets a lot of flack, but is there any other/better way? -Brad

« previous php.general (#236950) next »