|
|
Posted by Drewcore on 05/16/05 21:30
> I do suspect though, that the problem lies with how I am using addslashes
> and how I am not using it. Any definitive help would be much appreciated.
i'm not an expert at this, but i think that since you're using mysql
to store your data, you shouldn't use addslashes() and use
mysql_real_escape_string() instead...
http://us4.php.net/manual/en/function.mysql-real-escape-string.php
but that's just me. i would run any user input through that function
to make sure that it's 'safe' to put in your database. of course, i
would also be checking the input to make sure that it safe by other
means as well. hope that helps.
-drew
--
dc .. drewcore.com
Navigation:
[Reply to this message]
|