note 15078 deleted from function.mysql-escape-string by didou
| From: | didou@php.net | Date: | Sat, 17 May 2003 19:57:53 +0000 |
| Subject: | note 15078 deleted from function.mysql-escape-string by didou | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-48229@lists.php.net to get a copy of this message | ||
Note Submitter: php@funnelbox.com
good way of staying safe:
//---user submitted info
$i = MrUser"; DROP DATABASE mysql;
//---safety precaution
$es = mysql_escape_string($i);
$result = mysql_query($g);