Top "Mysql-real-escape-string" questions

A PHP function that escapes special characters in a string for use in an SQL statement.

What's the difference between PHP's addslashes and mysql(i)_escape_string?

Possible Duplicate: mysql_real_escape_string VS addslashes If they don't do exactly the same, what's the difference? The delimiter …

php mysql security mysql-real-escape-string addslashes
Escaping quotes in SQL

According to php.net I should use mysql_real_escape_string() and turn off magic quotes, because it's deprecated. So …

php sql mysql mysql-real-escape-string magic-quotes
mysql_real_escape_string with Zend

I am developing a web application using zend framework. For select statements I have used following way. Ex: public function …

php zend-framework zend-db mysql-real-escape-string
how to escape a string before insert or update in Ruby

In ruby ActiveRecord doesn't provide dynamic binding for update and insert sqls, of course i can use raw sql, but …

ruby activerecord sql-injection mysql-real-escape-string
Correct way to escape input data before passing to ODBC

I am very used to using MySQL and mysql_real_escape_string(), but I have been given a new PHP …

php odbc escaping user-input mysql-real-escape-string
Should I use mysqli_real_escape_string or should I use prepared statements?

Should I use mysqli_real_escape_string or should I use prepared statements? I've seen a tutorial now explaining prepared …

php mysqli prepared-statement mysql-real-escape-string
mysql_real_escape_string adds a slash '\' when saving word with apostrophe in it to database

Possible Duplicate: mysql_real_escape_string and single quote EDIT: I have checked and my hosting service' mysql database is …

php mysql mysql-real-escape-string
Access denied error when using mysql_real_escape_string()

i am trying escape some data before it goes into my database, but i keep getting this error: Warning: mysql_…

php mysql mysql-real-escape-string
problem with inserting a forward slash in mysql table

I got problem inserting the string "AM/PM" to my mySQL table $timeFormat = mysql_real_escape_string($_POST['timeFormat']); $sql=" …

php mysql mysql-real-escape-string