note 89352 deleted from function.mysql-real-escape-string by danbrown
| From: | danbrown@php.net | Date: | Wed, 04 Mar 2009 14:29:45 +0000 |
| Subject: | note 89352 deleted from function.mysql-real-escape-string by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-151453@lists.php.net to get a copy of this message | ||
Note Submitter: eric256 at gmail dot com
----
You can't use the
to quote values, only column names... At least on my version of MySQL
(just tested to verify) you can't use around values. Maybe there is some setting in
mysql to change that, but i think for default installs this isn't a danger.