Re: Re: mysql_real_escape_string() question
| From: | Ivo F.A.C. Fokkema | Date: | Fri, 29 Sep 2006 07:12:56 +0000 |
| Subject: | Re: Re: mysql_real_escape_string() question | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-242386@lists.php.net to get a copy of this message | ||
On Thu, 28 Sep 2006 11:33:06 -0400, Eric Butera wrote:
> On 9/28/06, Ivo F.A.C. Fokkema <I.F.A.C.Fokkema@lumc.nl> wrote:
>>
>> Hi Tedd,
>>
>> According to
>> http://nl3.php.net/mysql_real_escape_string
>>
>> The function requires a MySQL connection. If there is none, it
>> will try and create one. That fails now. Possibly you could use addslashes()?
>>
>> Regards,
>>
>> Ivo
>>
>> --
>> PHP General Mailing List (http://www.php.net/)
>> To unsubscribe, visit: http://www.php.net/unsub.php
>>
>>
> Don't use addslashes. Keep using mysql_real_escape string but make
> sure you have a valid link identifier like Ivo said.
>
> string mysql_real_escape_string ( string unescaped_string [, resource
> link_identifier] )
He's not actually *putting* it in a database, so isn't it useless to use a
mysql_ function for this...? Maybe I misunderstand Tedd and he does use a
database, as I don't see why he would need mysql_real_escape_string() for
cleaning input...