Re: Using mysql_real_escape_string without connecting to mysql
| From: | Richard Lynch | Date: | Thu, 24 Jan 2008 17:42:05 +0000 |
| Subject: | Re: Using mysql_real_escape_string without connecting to mysql | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-268016@lists.php.net to get a copy of this message | ||
On Wed, January 23, 2008 11:28 pm, Dotan Cohen wrote:
> In
> other words, mysql_real_escape_string itself is safe from SQL
> injection?
Yes.
That is the entire purpose of the existence of that function in the
first place.
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?