Re: Single quotes verses double quotes default behavior with DW --------> (Pretty much 0T )

From: Date: Wed, 28 Jun 2006 10:44:02 +0000
Subject: Re: Single quotes verses double quotes default behavior with DW --------> (Pretty much 0T )
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-238780@lists.php.net to get a copy of this message
Ryan A wrote: > ... > mysql_escape_string does look interesting but thats > again putting the strain in the script which I am wtf? that is just plain silly. btw if you read the following manual page: http://php.net/mysql_escape_string it will tell you that that func is depreciated - and that there is a better alternative: mysql_real_escape_string() > trying to avoid, may have to do it in the end though. > >> .... I guess you have wait till some DW guru in this > mailing list. changing " to ' in any given input and/or making that a requirement of your input routine is a brittle 'solution' - in short it sucks. what happens when freak/code/user X tries stuffing in a " regardless of what you have preached/documented/'hoped no-one would do'? you need a routine that *properly* escapes you data before you insert it into the database. > >> Good luck. > > Yep, am waiting here and from some forums, hopefully > someone will give me a break on this. which limb? and why the masochism? > Thanks for the well wishes. > as opposed to wishing wells.

« previous php.general (#238780) next »