Re: [PHP] Simulating mysql_real_escape_string

2006-06-19 Thread Richard Lynch
Honestly, just connect to the database earlier in your code... if you insist on not doing that, use mysql_escape_strign and just forget ever moving to Unicode data. On Mon, June 19, 2006 3:58 pm, Tim Traver wrote: > Hi all, > > ok, have a relatively complicated architecture of php scripts in >

Re: [PHP] Simulating mysql_real_escape_string

2006-06-19 Thread John Nichel
Tim Traver wrote: Hi all, ok, have a relatively complicated architecture of php scripts in place, and after reading more about SQL injection, want to make sure that I clean my data completely before I enter it into a MySQL db. I tend to clean the data on the way into the app, which has many

[PHP] Simulating mysql_real_escape_string

2006-06-19 Thread Tim Traver
Hi all, ok, have a relatively complicated architecture of php scripts in place, and after reading more about SQL injection, want to make sure that I clean my data completely before I enter it into a MySQL db. I tend to clean the data on the way into the app, which has many subroutines that p