Re: Using mysql_real_escape_string without connecting to mysql
| From: | Dotan Cohen | Date: | Wed, 23 Jan 2008 22:21:17 +0000 |
| Subject: | Re: Using mysql_real_escape_string without connecting to mysql | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-267951@lists.php.net to get a copy of this message | ||
On 24/01/2008, Chuck <chuck.carson@gmail.com> wrote:
>
> Why not write a function that does the same thing?
> mysql_real_escape_strings is a very simple function. And if your data
> is properly normalized and you don't support other charsets its very
> simple.
>
Maintenance and security seem to be two very good reasons to use the
built in function. Do the more experienced in attendance think
differently? Should I go ahead and reimplement the function specific
to the UTF-8 charset?
Dotan Cohen
http://what-is-what.com
http://gibberish.co.il
א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת
A: Because it messes up the order in which people normally read text.
Q: Why is top-posting such a bad thing?