Mysql Character ' in string

Mysql Character ' in string

Admigo
High-roller

Posts: 1,840
Threads: 399
Joined: Oct 2010
Reputation: 0

#1

05.05.2014, 16:38

( Последний раз редактировалось Admigo; 05.05.2014 в 17:16. )

Fixed.

Find

Reply

Vince
Spam Machine

Posts: 10,066
Threads: 38
Joined: Sep 2007
Reputation: 0

#2

05.05.2014, 17:04

Use '%e' instead of '%s' for strings in mysql_format. Or use myqsl_real_escape_string beforehand. Make sure to do this in all queries. If you're asking here, chances are your login system is vulnerable to SQL injection attacks.

Find

Reply

Admigo
High-roller

Posts: 1,840
Threads: 399
Joined: Oct 2010
Reputation: 0

#3

05.05.2014, 17:09

Thanks. I will try that.

Find

Reply

« Next Oldest | Next Newest »

View a Printable Version

Forum Jump:

Users browsing this thread: 1 Guest(s)