Posted by Marcus Bointon on 10/14/05 11:21

On 14 Oct 2005, at 04:48, David Robley wrote:

> That is incorrect. mysql_real_escape_string is a php function, not
> mysql.

Mostly true: mysql_real_escape_string is a php function, but it's
provided by the mysql extension as part of the mysql client libraries
(which explains the name). It doesn't do anything significantly
different to addslashes(), which is purely a PHP internal function.
If you are writing database independent code, you should probably
prefer addslashes (or things like adodb::qstr).

Marcus
--
Marcus Bointon
Synchromedia Limited: Putting you in the picture
marcus@synchromedia.co.uk | http://www.synchromedia.co.uk

• Next in forum: Re: [PHP] 404 ErrorDocument in safe mode
• Prev in forum: Re: [PHP] Login is not working. Please help....
• Thread view: Re: [PHP] prevent user from getting scripts outside the web folder [this better?]

[Reply to this message]