Re: using mysql_escape_string with implode() !!
| From: | Greg Donald | Date: | Thu, 31 May 2007 01:58:26 +0000 |
| Subject: | Re: using mysql_escape_string with implode() !! | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-255889@lists.php.net to get a copy of this message | ||
On 5/30/07, Richard Lynch <ceo@l-i-e.com> wrote:
You want to use mysql_escape_string, and NOT addslashes and NOT Magic Quotes.function slashes( $var ) { if( is_array( $var ) ) { return array_map( 'slashes', $var ); } else { return mysql_real_escape_string( $var ); } } set_magic_quotes_runtime( 0 ); if( get_magic_quotes_gpc() == 0 ) { $_GET = isset( $_GET ) ? array_map( 'slashes', $_GET ) : array(); $_POST = isset( $_POST ) ? array_map( 'slashes', $_POST ) : array(); $_COOKIE = isset( $_COOKIE ) ? array_map( 'slashes', $_COOKIE ) : array(); } -- Greg Donald http://destiney.com/