On Tue, 16 Nov 2004 12:33:15 +0000, Richard Davey <[EMAIL PROTECTED]> wrote:

> G> Is there a function that can automatically escape special characters
> G> before putting them into mySQL?
> 
> See magic_quotes to have it done for you. Although this isn't a
> recommend approach if you plan to distribute your application, in
> which case mysql_escape_string() is the one.

Just a comment :

Note:  This function (mysql_escape_string) has been deprecated since
PHP 4.3.0. Do not use this function. Use mysql_real_escape_string() 
instead.

So, if you're coding new scripts is better to use mysql_real_escape_string().

Best regards,
Jordi.

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to