From: kpoxa at kpoxa dot net
Operating system: Any
PHP version: 4.4.2
PHP Bug Type: Feature/Change Request
Bug description: I need autoescape fot mysql code
Description:
------------
In perl+mysql qyury params may by autoescaped,
in php i must user mysql_escape_string,
wy not exists function like this:
use
$ecaped_query = mysql_make_query("select * from table where id=? and
field2=? ORDER BY ID",1,'Here i may savely put any data this " and over
untrusted symbols');
Reproduce code:
---------------
function mysql_make_query() {
$num_args = func_num_args();
if ($num_args==0) return '';
$format = func_get_arg(0);
if ($num_args==1) return $format;
$strings = explode('?',$format);
$result = array_shift($strings);
for ($i=1;$i<$num_args;$i++) {
$result .= "'".mysql_escape_string(func_get_arg($i))."'";//'"
$result .= array_shift($strings);
}
return $result;
}
--
Edit bug report at http://bugs.php.net/?id=37011&edit=1
--
Try a CVS snapshot (PHP 4.4):
http://bugs.php.net/fix.php?id=37011&r=trysnapshot44
Try a CVS snapshot (PHP 5.1):
http://bugs.php.net/fix.php?id=37011&r=trysnapshot51
Try a CVS snapshot (PHP 6.0):
http://bugs.php.net/fix.php?id=37011&r=trysnapshot60
Fixed in CVS: http://bugs.php.net/fix.php?id=37011&r=fixedcvs
Fixed in release:
http://bugs.php.net/fix.php?id=37011&r=alreadyfixed
Need backtrace: http://bugs.php.net/fix.php?id=37011&r=needtrace
Need Reproduce Script: http://bugs.php.net/fix.php?id=37011&r=needscript
Try newer version: http://bugs.php.net/fix.php?id=37011&r=oldversion
Not developer issue: http://bugs.php.net/fix.php?id=37011&r=support
Expected behavior: http://bugs.php.net/fix.php?id=37011&r=notwrong
Not enough info:
http://bugs.php.net/fix.php?id=37011&r=notenoughinfo
Submitted twice:
http://bugs.php.net/fix.php?id=37011&r=submittedtwice
register_globals: http://bugs.php.net/fix.php?id=37011&r=globals
PHP 3 support discontinued: http://bugs.php.net/fix.php?id=37011&r=php3
Daylight Savings: http://bugs.php.net/fix.php?id=37011&r=dst
IIS Stability: http://bugs.php.net/fix.php?id=37011&r=isapi
Install GNU Sed: http://bugs.php.net/fix.php?id=37011&r=gnused
Floating point limitations: http://bugs.php.net/fix.php?id=37011&r=float
No Zend Extensions: http://bugs.php.net/fix.php?id=37011&r=nozend
MySQL Configuration Error: http://bugs.php.net/fix.php?id=37011&r=mysqlcfg
