note 88274 deleted from mysqli.real-escape-string by danbrown
| From: | danbrown@php.net | Date: | Mon, 19 Jan 2009 02:36:45 +0000 |
| Subject: | note 88274 deleted from mysqli.real-escape-string by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149429@lists.php.net to get a copy of this message | ||
Note Submitter: kaisellgren at gmail dot com
----
The below comment providing a way to escape _ and % is not a good approach, because it's
overcomplicated, but also slow.
Here's a better version:
<?php
$to_be_escaped = '_%';
$query = addcslashes($query,$to_be_escaped);
?>