Re: Using mysql_real_escape_string without connecting to mysql

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Jan 23, 2008 10:03 AM, Dotan Cohen <dotancohen@xxxxxxxxx> wrote:> On 23/01/2008, James Ausmus <james.ausmus@xxxxxxxxx> wrote:> > Try using the mysql_ping() command to check to see if your connection> > is available:> >> > http://us2.php.net/manual/en/function.mysql-ping.php> >> > something like:> >> > <?php> >> > if (!@mysql_ping()) //Note the @ is because, if mysql_ping cannot get> > connected, it will display a warning - suppress so users don't see> > {> >   connectToDB();> }> >> > mysql_real_escape_string('stuff');> >> > ?>> >> > HTH-> >> > James> >>> I was thinking about that, but the problem is that if there is no> connection, then the include is called and doesn't provide the> mysql_clean function that I expect that it would. Then, I make a> connection and use the function, expecting it to clean my data and it> doesn't.
You should be able to have the best of both worlds - it shouldn't haveto be an either/or:
function clean_mysql ($dirty) {   $dirty=str_replace ("--", "", $dirty);   $dirty=str_replace (";", "", $dirty);   if (!@mysql_ping())   {     functionThatConnectsToMySQL();   }   $clean=mysql_real_escape_string($dirty);   return $clean;}
This will connect if not connected, but either way it will still runthe mysql_real_escape_string function - it's not inside an elsestatement...
-James




>>> Dotan Cohen>> http://what-is-what.com> http://gibberish.co.il> א-ב-ג-ד-ה-ו-ז-ח-ט-י-ך-כ-ל-ם-מ-ן-נ-ס-ע-ף-פ-ץ-צ-ק-ר-ש-ת>> A: Because it messes up the order in which people normally read text.> Q: Why is top-posting such a bad thing?>

[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux