Re: Serialize
| From: | Richard Lynch | Date: | Tue, 30 May 2006 03:49:35 +0000 |
| Subject: | Re: Serialize | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-237064@lists.php.net to get a copy of this message | ||
On Wed, May 24, 2006 4:50 am, phplist@f2s.com wrote:
> Is a serialized array a "safe" string to insert into a mysql text
> field? Or is a
> function such as mysql_real_escape_string always needed?
Assume that a Bad Guy is smart enough to get SOMETHING in there to
mess you up, even if you serialize it.
Thus, you need to escape it.
--
Like Music?
http://l-i-e.com/artists.htm