Re: Re: mysql_real_escape_string() question
| From: | tedd | Date: | Fri, 29 Sep 2006 14:08:38 +0000 |
| Subject: | Re: Re: mysql_real_escape_string() question | ||
| References: | 1 2 3 4 5 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-242394@lists.php.net to get a copy of this message | ||
At 9:52 AM -0400 9/29/06, Eric Butera wrote:
Tedd, Not to make a big deal out of this but are you aware of the differences on filtering input and escaping output? mysql_real_escape_string is for escaping something for the database. It doesn't filter or clean anything. Just like htmlentities escapes for html output.Not to make a big deal out of it either, but what you said above is not germane to the question presented in the post. I said in two post now that I had cut/pasted the code from another script without noticing it was a mysql statement. What my question was, why did it work for a while (i.e., weeks) and then fail? In any event, I think I know what happened. Thanks for your time. tedd -- ------- http://sperling.com http://ancientstones.com http://earthstones.com