note 89352 added to function.mysql-real-escape-string
| From: | eric256 at gmail dot com | Date: | Wed, 04 Mar 2009 14:19:17 +0000 |
| Subject: | note 89352 added to function.mysql-real-escape-string | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-151449@lists.php.net to get a copy of this message | ||
You can't use the
to quote values, only column names... At least on my version of MySQL
(just tested to verify) you can't use around values. Maybe there is some setting in
mysql to change that, but i think for default installs this isn't a danger.
----
Server IP: 209.41.74.194
Probable Submitter: 72.1.122.62
----
Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php
Edit -- https://master.php.net/note/edit/89352
Del: integrated -- https://master.php.net/note/delete/89352/integrated
Del: useless -- https://master.php.net/note/delete/89352/useless
Del: bad code -- https://master.php.net/note/delete/89352/bad+code
Del: spam -- https://master.php.net/note/delete/89352/spam
Del: non-english -- https://master.php.net/note/delete/89352/non-english
Del: in docs -- https://master.php.net/note/delete/89352/in+docs
Del: other reasons-- https://master.php.net/note/delete/89352
Reject -- https://master.php.net/note/reject/89352
Search -- https://master.php.net/manage/user-notes.php