note 103663 deleted from function.preg-replace by thiago
| From: | thiago@php.net | Date: | Wed, 27 Apr 2011 02:02:10 +0000 |
| Subject: | note 103663 deleted from function.preg-replace by thiago | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-179183@lists.php.net to get a copy of this message | ||
Note Submitter: Kim
----
(In response to [php at example dot com]'s post)
Database input escaping should always be done last:
<?php
// string '\\\"' (length=4) - properly escaped
mysql_real_escape_string(preg_replace('~foo~', '\"', 'foo'));
?>