|
|
Posted by Jerry Stuckle on 05/07/06 23:44
frizzle wrote:
> Jerry Stuckle wrote:
>
>>R. Rajesh Jeba Anbiah wrote:
>>
>>>frizzle wrote:
>>>
>>>
>>>>Rafe Culpin wrote:
>>>>
>>>>
>>>>>In article <1146739267.490563.178550@y43g2000cwc.googlegroups.com>,
>>>>>phpfrizzle@gmail.com (frizzle) wrote:
>>>
>>> <snip>
>>>
>>>>AFAIK using mysql_real_escape_string deals with that in all cases
>>>>if i parse any input through that... Thanks for reminding though how
>>>>important that is!
>>>
>>> <snip>
>>>
>>> PHP saints are moving away from mysql_real_escape_string() to
>>>prepared statements
>>><http://ilia.ws/archives/103-mysql_real_escape_string-versus-Prepared-Statements.html>
>>>
>>> FWIW, For login system
>>><news:1110991855.257652.244240@z14g2000cwz.googlegroups.com> (
>>>http://groups.google.com/group/comp.lang.php/msg/310fad0eef59415a? )
>>>
>>>--
>>> <?php echo 'Just another PHP saint'; ?>
>>>Email: rrjanbiah-at-Y!com Blog: http://rajeshanbiah.blogspot.com/
>>>
>>
>>Some are, some aren't. Just another way of doing things.
>>
>>--
>>==================
>>Remove the "x" from my email address
>>Jerry Stuckle
>>JDS Computer Training Corp.
>>jstucklex@attglobal.net
>>==================
>
>
> Wow, made my temperature rise there, but as i understand from the
> comments, (in my case) mysql_real_escape_string is safe. Pfew.
> AFAIK it wasn't some way of handling things as Jerry implies ...
>
> I will look at your links later R. Rajesh Jeba Anbiah, thanks in
> advance!
>
> Frizzle.
>
Frizzle,
I didn't mean to make your temperature rise. My comment was strictly related to
Rajesh's comment that "PHP Saints" are moving towards prepared statements.
He indicates that all so-called "PHP Saints" think prepared statements are the
way to go. My only response is that the most experienced PHP people think
prepared statements are ONE way to go. Not necessarily the ONLY way.
Just like almost everything else, there are advantages and disadvantages to
using them.
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================
Navigation:
[Reply to this message]
|