Escaping issues
#1

Hi,

If player input that text for ex:

asdqwe\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\

It's will be escaped?
Reply
#2

Do you know what Escape really does and when you have to use it?
Reply
#3

It prevents for sql injection, for all text that player can write i gues?
Reply
#4

The problem is, how it does it? And yes, it will escape perfectly.
Reply
#5

I don't know how maybe in where queries
Reply
#6

but real question do i need escape or no? i mean text like player messages which player write to other player PM

Ex:



Update table SET PM1='%s',PM2='%s' WHERE name='%s'", PMFIRST[ playerid ], PMSECOND[ playerid ], Name );
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)