|
|
Posted by Cameri on 11/05/05 23:57
If you use On, PHP will automatically escape single and double quotes,
backslashes and null characters, you'll have to use stripslashes() if
you want the original string. This reduces efficiency because, you
don't always need to escape every single string, but in the other hand,
protects you a bit more from SQL injection.
http://www.php.net/manual/en/function.addslashes.php
http://www.php.net/manual/en/function.stripslashes.php
http://www.php.net/manual/en/ref.info.php#ini.magic-quotes-gpc
Navigation:
[Reply to this message]
|