Re: [PHP] addslashes vs. mysql_real_escape_string

Thank you John. Currently i am using PEAR DB abstration layer. Which function should i use to escape the ' character? There are couple of functions in the PEAR DB documentation so i don't know which one should i use. Hardik --- John W. Holmes [EMAIL PROTECTED] wrote: Richard Davey wrote:

Re: [PHP] addslashes vs. mysql_real_escape_string

From: Hardik Doshi [EMAIL PROTECTED] Currently i am using PEAR DB abstration layer. Which function should i use to escape the ' character? There are couple of functions in the PEAR DB documentation so i don't know which one should i use. I don't use PEAR DB, but it looks like quoteSmart() is

Re: [PHP] addslashes vs. mysql_real_escape_string

John W. Holmes wrote: From: Hardik Doshi [EMAIL PROTECTED] Currently i am using PEAR DB abstration layer. Which function should i use to escape the ' character? There are couple of functions in the PEAR DB documentation so i don't know which one should i use. I don't use PEAR DB, but it looks

[PHP] addslashes vs. mysql_real_escape_string

Hi, I just finished reading Chris Shiflett's article in this months php|a about SQL injection and have a question I can't seem to find answered anywhere: Does mysql_real_escape_string (or mysql_escape_string) do anything extra that addslashes() doesn't? In the examples in the manual it is just

Re: [PHP] addslashes vs. mysql_real_escape_string

Richard Davey wrote: Does mysql_real_escape_string (or mysql_escape_string) do anything extra that addslashes() doesn't? In the examples in the manual it is just used to escape the ' character, but that is exactly what addslashes() will do anyway. real_escape_string() takes the current character