note 71750 added to function.mysql-real-escape-string
| From: | spam at macosbrain dot com | Date: | Thu, 14 Dec 2006 09:52:55 +0000 |
| Subject: | note 71750 added to function.mysql-real-escape-string | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-120600@lists.php.net to get a copy of this message | ||
found a bug in 5.2.0 (suse10, Zend Engine v2.2.0, Suhosin Patch 0.9.6.2)
just try this code:
<?php
function quote($value)
{
if (!is_numeric($value))
{
die('value:'.$value.'|escaped:'.
mysql_real_escape_string($value).'|');
$value = mysql_real_escape_string($value);
}
return $value;
}
quote('thebug');
?>
result:
value:thebug|escaped:|
----
Server IP: 212.124.37.9
Probable Submitter: 85.214.63.234
----
Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php
Edit -- https://master.php.net/note/edit/71750
Del: integrated -- https://master.php.net/note/delete/71750/integrated
Del: useless -- https://master.php.net/note/delete/71750/useless
Del: bad code -- https://master.php.net/note/delete/71750/bad+code
Del: spam -- https://master.php.net/note/delete/71750/spam
Del: non-english -- https://master.php.net/note/delete/71750/non-english
Del: in docs -- https://master.php.net/note/delete/71750/in+docs
Del: other reasons-- https://master.php.net/note/delete/71750
Reject -- https://master.php.net/note/reject/71750
Search -- https://master.php.net/manage/user-notes.php