note 102639 added to mysqli.real-escape-string

[email protected] Fri, 25 Feb 2011 07:48:13 -0800
Newsgroups php.notes
Message-ID <[email protected]>
You can avoid all character escaping issues (on the PHP side) if you use prepare() and bind_param(), as an alternative to placing arbitrary string values in SQL statements.  This works because bound parameter values are NOT passed via the SQL statement syntax.
----
Server IP: 69.147.83.197
Probable Submitter: 24.15.230.97
----
Manual Page -- http://www.php.net/manual/en/mysqli.real-escape-string.php
Edit        -- https://master.php.net/note/edit/102639
Del: integrated  -- https://master.php.net/note/delete/102639/integrated
Del: useless     -- https://master.php.net/note/delete/102639/useless
Del: bad code    -- https://master.php.net/note/delete/102639/bad+code
Del: spam        -- https://master.php.net/note/delete/102639/spam
Del: non-english -- https://master.php.net/note/delete/102639/non-english
Del: in docs     -- https://master.php.net/note/delete/102639/in+docs
Del: other reasons-- https://master.php.net/note/delete/102639
Reject      -- https://master.php.net/note/reject/102639
Search      -- https://master.php.net/manage/user-notes.php