note 69521 deleted from function.mysql-real-escape-string by bobby
| From: | bobby@php.net | Date: | Fri, 08 Sep 2006 16:57:41 +0000 |
| Subject: | note 69521 deleted from function.mysql-real-escape-string by bobby | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-116935@lists.php.net to get a copy of this message | ||
Note Submitter: joe at ab2m dot net
Reason: bad code
----
This didn't seem to work for me under PHP 5:
$name=mysql_real_escape_string($_POST['name']);
print "$name";
nor this:
$name=$_POST['name'];
$name=mysql_real_escape_string($name);
print "$name";
But the deprecated mysql_escape_string works:
$name=mysql_escape_string($_POST['name']);