On Feb 28, 6:15 am, "Christopher E. Franklin, Sr."
<[EMAIL PROTECTED]> wrote:
> I will try that as well.  I thought that's what the sanitize->sql()
> did

If you look at the definitio of sanitize->sql():

        function sql($string) {
                if (!ini_get('magic_quotes_gpc')) {
                        $string = addslashes($string);
                }
                return $string;
        }

So my guess is that you have magic_quotes_gpc enabled and addslashes
is not being called.
Note that in cake 1.2 sanitize->sql has been deprecated and has
sanitize->escape instead, which in the case of mysql calls
mysql_real_escape_string.


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups "Cake 
PHP" group.
To post to this group, send email to cake-php@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/cake-php?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to