note 66509 added to function.addslashes
| From: | Picky at osu1 dot php dot net | Date: | Wed, 24 May 2006 19:55:19 +0000 |
| Subject: | note 66509 added to function.addslashes | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-111954@lists.php.net to get a copy of this message | ||
This function is deprecated in PHP 4.0, according to this article:
http://www.newsforge.com/article.pl?sid=06/05/23/2141246
Also, it is worth mentioning that PostgreSQL will soon start to block queries involving escaped
single quotes using \ as the escape character, for some cases, which depends on the string's
encoding. The standard way to escape quotes in SQL (not all SQL databases, mind you) is by changing
single quotes into two single quotes (e.g, ' ' ' becomes ' '' '
for queries).
You should look into other ways for escaping strings, such as "mysql_real_escape_string"
(see the comment below), and other such database specific escape functions.
----
Server IP: 216.194.113.175
Probable Submitter: 69.168.17.76
----
X-Spam-Status: No, hits=3.1 required=5.0 tests=DATE_MISSING,FROM_NO_LOWER
autolearn=no version=2.64
----
Manual Page -- http://www.php.net/manual/en/function.addslashes.php
Edit -- http://master.php.net/note/edit/66509
Del: integrated -- http://master.php.net/note/delete/66509/integrated
Del: useless -- http://master.php.net/note/delete/66509/useless
Del: bad code -- http://master.php.net/note/delete/66509/bad+code
Del: spam -- http://master.php.net/note/delete/66509/spam
Del: non-english -- http://master.php.net/note/delete/66509/non-english
Del: in docs -- http://master.php.net/note/delete/66509/in+docs
Del: other reasons-- http://master.php.net/note/delete/66509
Reject -- http://master.php.net/note/reject/66509
Search -- http://master.php.net/manage/user-notes.php