Re: Re: mysql input

Zoltán Németh wrote:

2008. 02. 19, kedd keltezéssel 11.03-kor Nathan Rixham ezt írta:

Richard Heyes wrote:

Shawn McKenzie wrote:

nihilism machine wrote:

I have a user saving a VARCHAR(255) field in a mysql db which has single quotes in the text, how can i replace them so that they dont fuck up my mysql command? -e

Have you tried: dont_fuck_up_my_mysql_command()

Hrmph, I can't seem to find that in the manual...

it's been depricated I heard in favour of unfuck();

as I remember its also in SPL. $whatever = new MySqlCommandUnFucker($command); $whatever->unFuck(); :D greets Zoltán Németh

<?php class MySqlCommandUnFucker { public function _unfucker($toUnFuck) { if(function_exists('get_magic_quotes_gpc')) { if (get_magic_quotes_gpc()) {

    $in = stripslashes($toUnFuck);

} } return $in; } public function unFuck($fucked) { if(function_exists('mysql_real_escape_string')) { return mysql_real_escape_string($this->_unfucker($fucked)); } else { return $fucked; } } } ?> usage: $unfucker = new MySqlCommandUnFucker; $sql = $unfucker ->unFuck($sql); :)