Re: Re: mysql_real_escape_string() question

From: Date: Fri, 29 Sep 2006 14:08:38 +0000
Subject: Re: Re: mysql_real_escape_string() question
References: 1 2 3 4 5  Groups: php.general 
Request: Send a blank email to php-general+get-242394@lists.php.net to get a copy of this message
At 9:52 AM -0400 9/29/06, Eric Butera wrote:
Tedd, Not to make a big deal out of this but are you aware of the differences on filtering input and escaping output? mysql_real_escape_string is for escaping something for the database. It doesn't filter or clean anything. Just like htmlentities escapes for html output.
Not to make a big deal out of it either, but what you said above is not germane to the question presented in the post. I said in two post now that I had cut/pasted the code from another script without noticing it was a mysql statement. What my question was, why did it work for a while (i.e., weeks) and then fail? In any event, I think I know what happened. Thanks for your time. tedd -- ------- http://sperling.com http://ancientstones.com http://earthstones.com

« previous php.general (#242394) next »