List Info

Thread: note 59134 deleted from function.addslashes by nlopess




note 59134 deleted from function.addslashes by nlopess
user name
2006-03-31 16:19:30
Note Submitter: ronald 

----

'safed' claims that addslashes() is no good for securing
MySQL queries, as it does not escape \n  and \r. However
the MySQL reference (http://dev.mysql.com/doc/refman/4.1/en/mysql
-real-escape-string.html) states "Strictly
speaking, MySQL requires only that backslash and the quote
character used to quote the string in the query be escaped.
This function quotes the other characters to make them
easier to read in log files."

So addslashes() should be fine from that point of view.

-- 
PHP Notes Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub
.php

[1]

about | contact  Other archives ( Real Estate discussion Medical topics )