note 88375 deleted from function.mysql-real-escape-string by danbrown
| From: | danbrown@php.net | Date: | Wed, 21 Jan 2009 16:31:17 +0000 |
| Subject: | note 88375 deleted from function.mysql-real-escape-string by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-149602@lists.php.net to get a copy of this message | ||
Note Submitter: bill at eupeople dot net
----
why not just simply only take everything up to the first semi-colon as your input and ignore
everything else?
$str=$_post['searchstr'];
$ssql=substr($str, 0, strpos(";", $str));
no following extra sql?!
strings are so powerful! :D