Posted by James Williams on 05/12/05 22:39

I'm pretty sure that, in order to use mysql_real_escape_string() you
must have magic quotes off or use stripslashes first... the same as
addslashes, so it should work if you just search and replace. Don't
quote me on that though

On 5/12/05, Richard Lynch <ceo@l-i-e.com> wrote:
> On Wed, May 11, 2005 8:27 pm, James Williams said:
> > On 5/11/05, Richard Lynch <ceo@l-i-e.com> wrote:
> >> Is mysql_real_escape_string *DIFFERENT* in some incredibly huge secure
> >> way
> >> that I want to stop working on all my current projects to go re-write
> >> the
> >> 10,000,000 lines of code?
> >
> > 2 words: Search & Replace.
>
> 2 words: Magic Quotes
>
> --
> Like Music?
> http://l-i-e.com/artists.htm
>
>


--
jamwil.com

• Next in forum: Re: [PHP] Best CC gateway
• Prev in forum: RE: [PHP] beginner needs help!
• Thread view: Re: [PHP] MySql injections (related question)

[Reply to this message]