Re: mysql input
| From: | Richard Lynch | Date: | Tue, 19 Feb 2008 19:35:32 +0000 |
| Subject: | Re: mysql input | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-269650@lists.php.net to get a copy of this message | ||
On Mon, February 18, 2008 10:05 pm, nihilism machine wrote:
> I have a user saving a VARCHAR(255) field in a mysql db which has
> single quotes in the text, how can i replace them so that they dont
> fuck up my mysql command?
http://php.net/mysql_real_escape_string
Google for "SQL injection" for (way) more info.
--
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?