Re: Re: mysql_real_escape_string() question

From: Date: Fri, 29 Sep 2006 07:12:56 +0000
Subject: Re: Re: mysql_real_escape_string() question
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-242386@lists.php.net to get a copy of this message
On Thu, 28 Sep 2006 11:33:06 -0400, Eric Butera wrote: > On 9/28/06, Ivo F.A.C. Fokkema <I.F.A.C.Fokkema@lumc.nl> wrote: >> >> Hi Tedd, >> >> According to >> http://nl3.php.net/mysql_real_escape_string >> >> The function requires a MySQL connection. If there is none, it >> will try and create one. That fails now. Possibly you could use addslashes()? >> >> Regards, >> >> Ivo >> >> -- >> PHP General Mailing List (http://www.php.net/) >> To unsubscribe, visit: http://www.php.net/unsub.php >> >> > Don't use addslashes. Keep using mysql_real_escape string but make > sure you have a valid link identifier like Ivo said. > > string mysql_real_escape_string ( string unescaped_string [, resource > link_identifier] ) He's not actually *putting* it in a database, so isn't it useless to use a mysql_ function for this...? Maybe I misunderstand Tedd and he does use a database, as I don't see why he would need mysql_real_escape_string() for cleaning input...

« previous php.general (#242386) next »