note 18186 added to function.mysql-escape-string
| From: | p at p dot net | Date: | Sun, 13 Jan 2002 19:32:21 +0000 |
| Subject: | note 18186 added to function.mysql-escape-string | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-24778@lists.php.net to get a copy of this message | ||
Actually. mysql_query executes one query.
only the mysql client that is provided with mysql will check for semi-colons.
therefore insert into foo("d"); drop database mysql; "); would have syntax
errors.
--
http://www.php.net/manual/en/function.mysql-escape-string.php
http://master.php.net/manage/user-notes.php?action=edit+18186
http://master.php.net/manage/user-notes.php?action=delete+18186
http://master.php.net/manage/user-notes.php?action=reject+18186