Please do NOT use addslashes.


Replace it with this:

http://php.net/mysql_real_escape_string



It is CRUCIAL if your database might maybe ever consider going international 
and having charset other than ISO-8856-1 or Latin1



[or the MySQL default of Monty's native language, which is very very very close 
to Latin1, but not quite]



Even if you know you'll never ever need a different charset, it's just "best 
practice" to use the DB-supplied escape function, rather than Rasmus' quick 
(and very needed) nineteen-ninety-mumble hack.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to