Posted by Jerry Stuckle on 06/30/07 13:24

Andrew Hutchings wrote:
> Jerry Stuckle wrote:
>
>> If you're not using unicode, then mysql_real_escape_string won't
>> decode it as unicode. So no matter what it is, the "malformed unicode
>> character" can't cause a problem.
>>
>> Now if you are using unicode, that might be a problem.
>>
>>
>
> I stand corrected, MySQL charset has to be unicode. Although this is
> now fixed in MySQL 5.0.22 anyway.

So it was only a problem in the implementation of
mysql_real_escape_string() then?

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

• Next in forum: Re: The structure of PHP/Web Application coding.
• Prev in forum: Re: To allow access only from the designated site.
• Thread view: Re: Question re: sql injection

[Reply to this message]