RE: [PHP] Help with IF ELSE
| From: | ceo at l-i-e dot com | Date: | Fri, 05 Dec 2008 15:11:57 +0000 |
| Subject: | RE: [PHP] Help with IF ELSE | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-284172@lists.php.net to get a copy of this message | ||
Please do NOT use addslashes.
Replace it with this:
http://php.net/mysql_real_escape_string
It is CRUCIAL if your database might maybe ever consider going international and having charset
other than ISO-8856-1 or Latin1
[or the MySQL default of Monty's native language, which is very very very close to Latin1, but
not quite]
Even if you know you'll never ever need a different charset, it's just "best
practice" to use the DB-supplied escape function, rather than Rasmus' quick (and very
needed) nineteen-ninety-mumble hack.