note 44627 added to function.mysql-escape-string
| From: | Gabriel at osu1 dot php dot net | Date: | Wed, 11 Aug 2004 10:15:20 +0000 |
| Subject: | note 44627 added to function.mysql-escape-string | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-74433@lists.php.net to get a copy of this message | ||
regarding nick at spam me not careercast dot com
you don't have to use _single_ quotes. Just *Quote* the content any way you like.
from mysql manual, 10.1.1 Strings:
A string is a sequence of characters, surrounded by either single quote (
'') or
double quote ("') characters. Examples:
'a string'
"another string"
You made me fear that all code i've in my life was insecure because i used double quotes for
mysql (since i use single "leave my strings alone" quotes in php). :)
----
Manual Page -- http://www.php.net/manual/en/function.mysql-escape-string.php
Edit -- http://master.php.net/manage/user-notes.php?action=edit+44627
Delete -- http://master.php.net/manage/user-notes.php?action=delete+44627&report=yes
Reject -- http://master.php.net/manage/user-notes.php?action=reject+44627&report=yes
Search -- http://master.php.net/manage/user-notes.php