note 63286 deleted from function.mysql-real-escape-string by nlopess
| From: | nlopess@php.net | Date: | Sat, 18 Mar 2006 12:41:12 +0000 |
| Subject: | note 63286 deleted from function.mysql-real-escape-string by nlopess | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-106023@lists.php.net to get a copy of this message | ||
Note Submitter: pmak at aaanime dot net
----
You don't need to use mysql_real_escape_string() on variables submitted via $_POST. They are
already escaped, e.g. ' has become \' already. So if you call mysql_real_escape_string()
again, then you just get those \ literally in your MySQL data.