Re: Using mysql_real_escape_string without connecting to mysql
| From: | Dotan Cohen | Date: | Wed, 23 Jan 2008 21:17:09 +0000 |
| Subject: | Re: Using mysql_real_escape_string without connecting to mysql | ||
| References: | 1 2 3 4 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-267937@lists.php.net to get a copy of this message | ||
On 23/01/2008, Richard Lynch <ceo@l-i-e.com> wrote:
> On Wed, January 23, 2008 12:47 pm, Dotan Cohen wrote:
> > On 23/01/2008, Eric Butera <eric.butera@gmail.com> wrote:
> >> On Jan 22, 2008 8:01 PM, Dotan Cohen <dotancohen@gmail.com> wrote:
> > However, I do not think that the script should throw an error until I
> > actually call mysql_clean. Merely having it in an include should not
> > throw an error if the function is not being used.
>
> If you get it to throw an error for a connection not present, then you
> ARE calling the function.
I just reviewed the code, and you are right. I call the include for
the database connection (from outside the public directory) just
before the mysql_query, which is _after_ I've cleaned the variables.
> You may not know where you called it in your rats' nest of OOP, but
> you are calling it. :-) :-) :-)
Yes, I was.
> The only errors PHP throws without calling functions are parse errors.
Good to know.
Dotan Cohen
http://what-is-what.com
http://gibberish.co.il
א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?