Re: mysql_real_escape_string paranoid enough?
| From: | mike | Date: | Sat, 21 Mar 2009 22:37:24 +0000 |
| Subject: | Re: mysql_real_escape_string paranoid enough? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-290510@lists.php.net to get a copy of this message | ||
2009/3/21 Nisse Engström <news.NOSPAM.0ixbtqKe@luden.se>:
> I tend to use the escape functions in very close proximity to
> the actual query, so I don't see a problem with supplying a
> connection identifier.
Except unless explicitly specified, my applications do not require a
connection identifier as it is stored in a global variable (I have a
nifty little database access layer)