Re: Should I convert special characters before writing them to a table?
| From: | Steve Werby | Date: | Thu, 04 Oct 2001 15:37:45 +0000 |
| Subject: | Re: Should I convert special characters before writing them to a table? | ||
| References: | 1 2 3 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-69947@lists.php.net to get a copy of this message | ||
"Arpad Tamas" <sts@mail.xubion.hu> wrote:
> I think stripslashes() isn't needed when retrieving data from the db,
> it is needed only in the query string to protect special chars from
> interpretting them as sql.
I want to say this isn't true, but maybe that depends on the configuration
of PHP (I'm thinking magic quotes settings off-hand). From experience I
know that stripslashes() can be needed when retrieving data from a db. Just
today I've had to do so for clients separately using PostgreSQL and MySQL.
YMMV.
--
Steve Werby
President, Befriend Internet Services LLC
http://www.befriend.com/