note 83503 deleted from function.mysql-real-escape-string by danbrown
| From: | danbrown@php.net | Date: | Sat, 14 Mar 2009 15:01:23 +0000 |
| Subject: | note 83503 deleted from function.mysql-real-escape-string by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-151913@lists.php.net to get a copy of this message | ||
Note Submitter: Anonymous
----
<?php
function mysql_prep($value){
$magic_quotes_active = get_magic_quotes_gpc();
$new_enough_php = function_exists("mysql_real_escape_string");
// i.e PHP >= v4.3.0
if($new_enough_php){
//undo any magic quote effects so mysql_real_escape_string can do the work
if($magic_quotes_active){
$value = stripslashes($value);
}
$value = mysql_real_escape_string($value);
}else{ // before PHP v4.3.0
// if magic quotes aren't already on this add slashes manually
if(!$magic_quotes_active){
$value = addslashes($value);
} //if magic quotes are avtive, then the slashes already exist
}
return $value;
}
?>