|
|
Posted by Jerry Stuckle on 05/09/06 18:54
Drakazz wrote:
> Jerry, thanks for telling me about mysql_real_escape_string
>
>
> However, at least what I prefer is that the _GET and other user input
> variables would be as they were sent to the browser, in the sense that
> ' wouldn't be escaped to \' . A good example is you trying to write to
> a file :x
>
Drakazz,
They won't be escaped if magic quotes is off.
--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================
Navigation:
[Reply to this message]
|