Re: Re: cvs: php-src(PHP_5_2) / NEWS /ext/mysql php_mysql.c php_mysql.h
| From: | Antony Dovgal | Date: | Mon, 14 May 2007 18:07:37 +0000 |
| Subject: | Re: Re: cvs: php-src(PHP_5_2) / NEWS /ext/mysql php_mysql.c php_mysql.h | ||
| References: | 1 2 3 4 5 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-29420@lists.php.net to get a copy of this message | ||
On 05/14/2007 09:49 PM, Stefan Walk wrote:
This is more a security fix than a new feature. mysql_real_escape_string using the wrong character set can be a problem when the charset used by it is sufficiently different from the one that is put into it.Well, then you may name ext/mysqli a big security fix. You can't use this function in new development and be sure you're "secure", 'cause this would require PHP 5.2.3+. In the same time you can require MySQLi which is available since 5.0.0. Now what does the new function fix? Legacy applications requiring 5.2.3+ to be secure? -- Wbr, Antony Dovgal