On Mon, February 18, 2008 10:05 pm, nihilism machine wrote:
> I have a user saving a VARCHAR(255) field in a mysql db which has
> single quotes in the text, how can i replace them so that they dont
> fuck up my mysql command?

http://php.net/mysql_real_escape_string


Google for "SQL injection" for (way) more info.

-- 
Some people have a "gift" link here.
Know what I want?
I want you to buy a CD from some indie artist.
http://cdbaby.com/from/lynch
Yeah, I get a buck. So?

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to