Re: Sanitizing potential MySQL strings with no database connection
| From: | Dotan Cohen | Date: | Wed, 21 Oct 2009 15:09:50 +0000 |
| Subject: | Re: Sanitizing potential MySQL strings with no database connection | ||
| References: | 1 2 3 4 5 6 7 8 9 10 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-299159@lists.php.net to get a copy of this message | ||
> If you look a little closer, you will see that I am not using addslashes().
> Rather, I am using addcslashes(). This allows to specify the characters
> that I want escaped, instead of the default assumed characters from
> addslashes().
>
I do not know which characters to escape.
--
Dotan Cohen
http://what-is-what.com
http://gibberish.co.il