note 51981 deleted from function.mysqli-stmt-bind-param by nlopess
| From: | nlopess@php.net | Date: | Mon, 30 Jan 2006 17:27:42 +0000 |
| Subject: | note 51981 deleted from function.mysqli-stmt-bind-param by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-102735@lists.php.net to get a copy of this message | ||
Note Submitter: chsnyder at gmail dot com
----
It should be noted the values bound to a prepared statement with mysqli_stmt_bind_param() will
automatically be properly escaped for the current database connection.
Using mysqli_real_escape_string() or magic_quotes on these values will result in their being
double-escaped, and cause unexpected results.