|
|
Posted by Pasquale on 11/02/05 21:55
Oli Filth wrote:
> Don't user magic quotes, full stop. They're a stupid idea, the PHP
> developers have realised this and are slowly trying to dissaude people
> from using them:
>
> "It's preferred to code with magic quotes off and to instead escape the
> data at runtime, as needed." (PHP manual)
>
> What's more, they aren't actually much good for the job they were
> originally intended, safe query construction. If you're using MySQL (you
> didn't mention what DB you're using, so I'm taking a guess), use
> mysql_real_escape_string() instead.
"...use mysql_real_escape_string() instead". Instead of magic quotes on?
My site is hosted with a hosting company. How would I bypass magic
quotes being on?
Thanks.
Navigation:
[Reply to this message]
|