From: prikid at gmail dot com
Operating system: FreeBSD 6
PHP version: 5.2.4
PHP Bug Type: JSON related
Bug description: json_encode does not escape single quotes
Description:
------------
When using json_encode() and trying to insert into mysql table field with
single quotes - single quote is not escaped and mysql produces error.
Reproduce code:
---------------
$name = "Mike O'Brien";
$email = "[EMAIL PROTECTED]";
$settings = array("name"=> $name,"email" => $email);
$json = json_encode($settings);
$sql = "INSERT INTO `users` VALUES('".$json."')";
$result = mysql_query($sql) or die (mysql_error());
Expected result:
----------------
Successfull mysql insertion with escaped single quote.
Actual result:
--------------
You have an error in your SQL syntax; check the manual that corresponds to
your MySQL server version for the right syntax to use near 'Brien
--
Edit bug report at http://bugs.php.net/?id=42569&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=42569&r=trysnapshot44
Try a CVS snapshot (PHP 5.2):
http://bugs.php.net/fix.php?id=42569&r=trysnapshot52
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=42569&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=42569&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=42569&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=42569&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=42569&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=42569&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=42569&r=support
Expected behavior: http://bugs.php.net/fix.php?id=42569&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=42569&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=42569&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=42569&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=42569&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=42569&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=42569&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=42569&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=42569&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=42569&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=42569&r=mysqlcfg
