note 69085 deleted from function.mysql-real-escape-string by bjori

Note Submitter: antrecu at yahoo dot com Reason: useless ---- Hi everyone, this is a little piece of code, which helps to validates a user into some application, using mysql_real_escape_string(). hope it can be useful. function quote_smart($value) { // Stripslashes if (get_magic_quotes_gpc()) { $value = stripslashes($value); } // Quote if not integer if (!is_numeric($value)) { $value = "'" . mysql_real_escape_string($value) . "'"; } return $value; } function validate_SystemUser($user_name, $password){ $password = quote_smart(crypt($password, 'SS')); $sel_user = "SELECT id FROM user WHERE userName = " . quote_smart($user_name) . " AND password = " . $password . ""; //DB connection, query execution & returns resulset $res_user = query($sel_user); $row_user = mysql_num_rows($res_user); if($row_user > 0){ while($row_user = mysql_fetch_array($res_user)){ $idUser = $row_user[0]; } return $idUser; }else{ //bla bla } }