Re: Sanitizing potential MySQL strings with no database connection
| From: | Jim Lucas | Date: | Wed, 21 Oct 2009 15:27:51 +0000 |
| Subject: | Re: Sanitizing potential MySQL strings with no database connection | ||
| References: | 1 2 3 4 5 6 7 8 9 10 11 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-299161@lists.php.net to get a copy of this message | ||
Dotan Cohen wrote:
>> If you look a little closer, you will see that I am not using addslashes().
>> Rather, I am using addcslashes(). This allows to specify the characters
>> that I want escaped, instead of the default assumed characters from
>> addslashes().
>>
>
> I do not know which characters to escape.
>
I have given you the link to the mysql_real_escape_string(). On that page, it
shows the characters that it escapes.