Re: prevent user from getting scripts outside the web folder [this better?]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, October 14, 2005 8:20 am, John Nichel wrote:
> David Robley wrote:
>> Ben wrote:
> <snip>
>>>My understanding is that mysql_real_escape_string will only work
>>> while
>>>you are connected to mysql.  Not sure if that is the case in your
>>>situation.
>>
>>
>> That is incorrect. mysql_real_escape_string is a php function, not
>> mysql.
>
> Actually, it's both.  And yes, you *do* have to be connected to the
> mysql server.

There is, however, mysql_escape_string() which does not require a
connection -- but which also can't take into account the
language/locale settings *OF* the connection, which is why it's not a
"real" escape.  It might, however, be useful in some circumstances.

I missed the beginning of this thread, so apologies it that's a repeat.

-- 
Like Music?
http://l-i-e.com/artists.htm

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php


[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux