addslashes doesn't take encoding's into account.
http://shiflett.org/blog/2006/jan/addslashes-versus-mysql-real-escape-string
goes into some details.
Karl DeSaulniers wrote:
So what's the difference with that and addslashes() ?
Karl
Sent from losPhone
On Dec 15, 2009, at 3:50 PM, Chris wr
So what's the difference with that and addslashes() ?
Karl
Sent from losPhone
On Dec 15, 2009, at 3:50 PM, Chris wrote:
Karl DeSaulniers wrote:
What does this do exactly?
Documentation was a bit fuzzy for me.
Is it needed at all times to protect with?
Per the docs:
prepends backslashes t
Karl DeSaulniers wrote:
What does this do exactly?
Documentation was a bit fuzzy for me.
Is it needed at all times to protect with?
Per the docs:
prepends backslashes to the following characters: \x00, \n, \r, \, ', "
and \x1a.
So anything that has a null character, a newline (windows/linux
Karl DeSaulniers wrote:
Hi Chris,
On Dec 14, 2009, at 8:09 PM, Chris wrote:
Problem 1 is sql injection. Wrap each variable in a
mysql_real_escape_string call:
insert into table (...) values ('" .
mysql_real_escape_string($username) . "'
At one point I did have the mysql_real_escap
What does this do exactly?
Documentation was a bit fuzzy for me.
Is it needed at all times to protect with?
On Dec 14, 2009, at 8:22 PM, Karl DeSaulniers wrote:
mysql_real_escape_string()
Karl DeSaulniers
Design Drumm
http://designdrumm.com
Hi Chris,
On Dec 14, 2009, at 8:09 PM, Chris wrote:
Problem 1 is sql injection. Wrap each variable in a
mysql_real_escape_string call:
insert into table (...) values ('" . mysql_real_escape_string
($username) . "'
At one point I did have the mysql_real_escape_string() and it worke
Karl DeSaulniers wrote:
HI,
Thanks for your response. Here is my query. UserID is auto incrament and
UserLastLogin is a current_timestamp.
$query_users = "INSERT INTO users(UserID, Username, UserEmail,
UserPassword, UserFirstName, UserLastName, UserCompany, UserAddress,
UserAddress2, UserCit
HI,
Thanks for your response. Here is my query. UserID is auto incrament
and UserLastLogin is a current_timestamp.
$query_users = "INSERT INTO users(UserID, Username, UserEmail,
UserPassword, UserFirstName, UserLastName, UserCompany, UserAddress,
UserAddress2, UserCity, UserState, UserCoun
I don't quite understand what your problem is but it looks as if some fields
of the records that show up in phpMySql are empty and that the result page
that you have built does not show them. If that is the case, is there a
where clasue that causes them to not return?
Can you run the query that is
Welcome Rodrigo!
Start checking php.net
for object/clasess check out this mirror site of php.net
http://php.oregonstate.edu/manual/en/ref.classobj.php
By the way I don't know if we have from Brazil here...
M. Mamedov
- Original Message -
From: "Rodrigo Kochenburger" <[EMAIL PROTECTED]>
The page you gave me didnt help but thanks anyway :)
We solved the problem which was dizzing us for days by using the silly
command
pack("H*", $image)
!!
Dimitris
"Ben Bleything" <[EMAIL PROTECTED]> wrote in message
01c10ae1$30a03690$0201a8c0@c1141975c">news:01c10ae1$30a03690$0201a
Check out http://www.phpbuilder.com/columns/florian19991014.php3. It
deals with MySQL, but the concepts should be the same... it sounds like
there are some steps about handling the binary data in a binary-safe
fashion that are getting left out.
Good luck,
Ben
-Original Message-
From: a
Hi!
try using LIMIT in your query...
SELECT * from thistable LIMIT 0,15
and then make a loop to display the results.
regards
Marcelo Gulin
MacBane escribió:
>
> Has anyone got some code to display the first say 15 records from a query
> then get the next 15 then next for a mysql d
13 matches
Mail list logo