Re: MySql injections (related question)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I'm pretty sure that, in order to use mysql_real_escape_string() you
must have magic quotes off or use stripslashes first... the same as
addslashes, so it should work if you just search and replace.  Don't
quote me on that though

On 5/12/05, Richard Lynch <ceo@xxxxxxxxx> wrote:
> On Wed, May 11, 2005 8:27 pm, James Williams said:
> > On 5/11/05, Richard Lynch <ceo@xxxxxxxxx> wrote:
> >> Is mysql_real_escape_string *DIFFERENT* in some incredibly huge secure
> >> way
> >> that I want to stop working on all my current projects to go re-write
> >> the
> >> 10,000,000 lines of code?
> >
> > 2 words: Search & Replace.
> 
> 2 words: Magic Quotes
> 
> --
> Like Music?
> http://l-i-e.com/artists.htm
> 
> 


-- 
jamwil.com

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux