note 51275 added to function.odbc-execute

Does anybody else think the "apostrophy-quoted file name" parameter feature is a potential security hole? I'd rather not have to edit user fields to detect this possibility, and I'd rather not have to explain to anyone why they can't put apostrophy-quoted strings in their database. I suggest this modification: pass an opened readable file-handle resource as a parameter instead. (In the meantime, I've patched this feature out of my PHP build.) ---- Manual Page -- http://www.php.net/manual/en/function.odbc-execute.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+51275 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+51275&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+51275&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+51275&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+51275&report=yes&reason=useless Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+51275&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+51275&report=yes Search -- http://master.php.net/manage/user-notes.php