Archive of Defense LIKE Operator MySQL mysql_real_escape_string Performance PHP Sanitize
Sanitization of user input.
-
mysql_real_escape_string SQL injection
Posted in PHPUnderstanding how to safely use mysql_real_escape_string function. PHP provides mysql_real_escape_string() to escape special characters in a string before sending a query to MySQL. This function was adopted by many to escape single quotes in strings and by the same occasion prevent SQL injection attacks. However, it can create...
Continue reading this entry →
