Re: EvilFilename

If you are in PHP you can use the addslashes function. 
Check this out, http://www.php.net/manual/en/function.addslashes.php
  ----- Original Message ----- 
  From: andnor80 <[email protected]> 
  To: [email protected] 
  Sent: Tuesday, January 14, 2003 2:40 PM
  Subject: [ubh] EvilFilename


  Maybe this is not the right forum, but I'll do a try :-)

  I have made a little php script to insert all retrieved filenames 
  into a mysql database. But have now got into some problems when the 
  filenames have the char ' in the filename, which causes mysql to do 
  an invalid query. I do use -C option in ubh that should remove all 
  evil chars, maybe this is not an evil char normally, but it sure is 
  when inserting filename into mysql :-)
  Can there be modifications made to that ' is treated as evil? (i 
  would also like to rank & as evil). 

  thanks again for your efforts.


  To unsubscribe from this group, send an email to:
  [email protected]



  Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service.