Posted by Jerry Stuckle on 05/09/06 18:54

Drakazz wrote:
> Jerry, thanks for telling me about mysql_real_escape_string
>
>
> However, at least what I prefer is that the _GET and other user input
> variables would be as they were sent to the browser, in the sense that
> ' wouldn't be escaped to \' . A good example is you trying to write to
> a file :x
>

Drakazz,

They won't be escaped if magic quotes is off.

--
==================
Remove the "x" from my email address
Jerry Stuckle
JDS Computer Training Corp.
jstucklex@attglobal.net
==================

[Back to original message]