Why $_REQUEST do the same thing as mysql_escape_string()
| From: | truncatei at gmail dot com | Date: | Wed, 17 Oct 2007 14:24:49 +0000 |
| Subject: | Why $_REQUEST do the same thing as mysql_escape_string() | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-263267@lists.php.net to get a copy of this message | ||
I put some thing in an form input filed like this:
' " \
then submit to a php script.
When use $_GET / $_POST / $_REQUEST to get the value,
I always get:
\' \" \\
In php expression it should be:
$_REQUEST['field'] = "\\' \\\" \\\\";
Any one who can tell me why?