RE: [PHP] Mixing sprintf and mysql_real_escape_string
| From: | Peter Lauri | Date: | Tue, 08 Aug 2006 00:39:22 +0000 |
| Subject: | RE: [PHP] Mixing sprintf and mysql_real_escape_string | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-240299@lists.php.net to get a copy of this message | ||
[snip]My guess: magic_quotes_gpc is enabled where you're running the script.
Therefore slashes are already present in the data from the form post.[/snip]
Should I turn it off? Adding slashes and mysql_real_escape_string is not
exactly the same thing, correct?
/Peter