Re: [PHP] addslashes vs. mysql_real_escape_string

2004-04-19 Thread Justin Patrin
John W. Holmes wrote: From: "Hardik Doshi" <[EMAIL PROTECTED]> Currently i am using PEAR DB abstration layer. Which function should i use to escape the ' character? There are couple of functions in the PEAR DB documentation so i don't know which one should i use. I don't use PEAR DB, but it loo

Re: [PHP] addslashes vs. mysql_real_escape_string

2004-04-19 Thread John W. Holmes
From: "Hardik Doshi" <[EMAIL PROTECTED]> > Currently i am using PEAR DB abstration layer. Which > function should i use to escape the ' character? There > are couple of functions in the PEAR DB documentation > so i don't know which one should i use. I don't use PEAR DB, but it looks like quoteSmar

Re: [PHP] addslashes vs. mysql_real_escape_string

2004-04-19 Thread Hardik Doshi
Thank you John. Currently i am using PEAR DB abstration layer. Which function should i use to escape the ' character? There are couple of functions in the PEAR DB documentation so i don't know which one should i use. Hardik --- "John W. Holmes" <[EMAIL PROTECTED]> wrote: > Richard Davey wrote:

Re: [PHP] addslashes vs. mysql_real_escape_string

2004-04-18 Thread John W. Holmes
Richard Davey wrote: Does mysql_real_escape_string (or mysql_escape_string) do anything extra that addslashes() doesn't? In the examples in the manual it is just used to escape the ' character, but that is exactly what addslashes() will do anyway. real_escape_string() takes the current character s

[PHP] addslashes vs. mysql_real_escape_string

2004-04-18 Thread Richard Davey
Hi, I just finished reading Chris Shiflett's article in this months php|a about SQL injection and have a question I can't seem to find answered anywhere: Does mysql_real_escape_string (or mysql_escape_string) do anything extra that addslashes() doesn't? In the examples in the manual it is just us