Posted by frizzle on 11/08/42 11:31

Thanks Oli,

I don't completely understand your answers:
If i * always * use the mysql_real_escape_string() am i safe?
And with an insert statement, does it matter what kind of quotes i use
for the query?
Like
"Select * From 'bla' "
or
'Select * From \'bla\' ' ?

Thanks.

Frizzle.

• Next in forum: Re: Report writing in PHP - what tools for making formating nice?
• Prev in forum: Re: Migrating to a new server: how to map one directory to another
• Thread view: Re: 2 small Q's about mysql_real_escape_string()

[Reply to this message]