--- Ben Ramsey <[EMAIL PROTECTED]> wrote:
> You should also use mysql_real_escape_string() on
> the data from the client.
Even though Magic Quotes GPC is turned on ?
Stuart
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
--- Jay Blanchard
<[EMAIL PROTECTED]> wrote:
> [snip]
> May I ask why you are suggesting this function ?
>
> > You can use htmlentities() on the information
> placed
> [/snip]
>
> Because it will convert things like quotes into
> their HTML counterparts
> before you place them into the table.
I
Jay Blanchard wrote:
[snip]
May I ask why you are suggesting this function ?
You can use htmlentities() on the information placed
[/snip]
Because it will convert things like quotes into their HTML counterparts
before you place them into the table. If you are reading it back out to
a web interface t
[snip]
May I ask why you are suggesting this function ?
> You can use htmlentities() on the information placed
[/snip]
Because it will convert things like quotes into their HTML counterparts
before you place them into the table. If you are reading it back out to
a web interface they get properly
May I ask why you are suggesting this function ?
Stuart
--- Jay Blanchard
<[EMAIL PROTECTED]> wrote:
> [snip]
> It's a mysql text field.
> [/snip]
>
> You can use htmlentities() on the information placed
> into the field
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe,
[snip]
It's a mysql text field.
[/snip]
You can use htmlentities() on the information placed into the field
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php
--- "Vail, Warren" <[EMAIL PROTECTED]> wrote:
> I also don't know if MySQL will police things input
> to a text column to make
> sure they are valid ascii text characters.
>
No Mysql won't do it. PHP validation would have to be
involved.
Stuart
--
PHP General Mailing List (http://www.php.net
It's a mysql text field.
Stuart
--- Jay Blanchard
<[EMAIL PROTECTED]> wrote:
> [snip]
> Any thoughts ?
> [/snip]
>
> I thought I'd have lunch today, but I didn't.
>
> Is it a 'text' data type, or 'BLOB', (you said,
> "actual Mysql Text
> column, aka like a blob") because the distinction is
> ne
don't know if MySQL will police things input to a text column to make
sure they are valid ascii text characters.
Warren Vail
-Original Message-
From: Stuart Felenstein [mailto:[EMAIL PROTECTED]
Sent: Thursday, November 04, 2004 12:32 PM
To: [EMAIL PROTECTED]
Subject: [PHP] Question:
[snip]
Any thoughts ?
[/snip]
I thought I'd have lunch today, but I didn't.
Is it a 'text' data type, or 'BLOB', (you said, "actual Mysql Text
column, aka like a blob") because the distinction is needed.
--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/
I have a field that is an actual Mysql Text column,
aka like a blob. I'm wondering if doing a standard
validation that checks for characters outside of the
alphanumeric range is enough. I'm imagining some
users will cut and paste from a Word or PDF doc into
the field. I've done it myself and no w
11 matches
Mail list logo