note 11774 deleted from function.addslashes by felipe
| From: | felipe@php.net | Date: | Sat, 29 Dec 2007 20:27:48 +0000 |
| Subject: | note 11774 deleted from function.addslashes by felipe | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-134195@lists.php.net to get a copy of this message | ||
Note Submitter: spamdunk at home dot com
----
FYI, Quoting the single quote (') as ('') is not an Oracle stle, or a Sybase style,
or any other vendor-specific style. It is the ANSI SQL (i.e. SQL standard) style.
Using blackslahes to escape characters is a proprietary extension that some databases have. If you
want your SQL to be portable across databases, don't use it.
For example (on PostgreSQL):
=> create table t (s varchar(64));
CREATE
=> insert into t values ('one''two"three''');
INSERT 206474 1
wapkey=> select * from t;
s
----------------
one'two"three'
(1 row)
... as expected, as per the standard.