Re: Re: PHP 4.3.3RC3 Released
| From: | Jedi/Sector One | Date: | Fri, 15 Aug 2003 09:24:40 +0000 |
| Subject: | Re: Re: PHP 4.3.3RC3 Released | ||
| References: | 1 2 3 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-3988@lists.php.net to get a copy of this message | ||
On Fri, Aug 15, 2003 at 11:19:47AM +0200, Ard Biesheuvel wrote:
> 'SELECT ... WHERE id='. (int)$id
Even shorter :
'SELECT ... WHERE id='. $id+0
> 'SELECT ... WHERE name=" '.addslashes($name).' " '
Wasn't addslashes() designed to escape shell commands and
mysql_escape_string() for MySQL queries?
--
__ /*- Frank DENIS (Jedi/Sector One) <j@42-Networks.Com> -*\ __
\ '/ <a href="http://www.PureFTPd.Org/"> Secure FTP Server
</a> \' /
\/ <a href="http://www.Jedi.Claranet.Fr/"> Misc. free
software </a> \/