mysql
nkbsbl asked:


I am using PHP and right now I am using the function mysql_escape_string on the strings I am writing. Unfortunately this puts a backslash into my database, which is ugly and I do not want to have to escape backslashes upon pulling data out.

Example: That’s is getting written as That\’s

Comments

Naz on 20 September, 2008 at 1:41 am #

thats an age old problem, there is a function that does that for you, otherwise if you are a good programmer you can do this yourself by using str_replace()


vpalexander on 21 September, 2008 at 4:42 am #

It’s also advised that you do a server-side sanity check on anything coming through the DMZ. This usually means bounds-checking variables for the most part.


Post a Comment
Name:
Email:
Website:
Comments: