ID:               35368
 Comment by:       uggabc at yahoo dot cn
 Reported By:      lists at cyberlot dot net
 Status:           Suspended
 Bug Type:         PDO related
 Operating System: *
 PHP Version:      6CVS, 5CVS
 Assigned To:      wez
 New Comment:

It is a wonderful article,I like it!Welcome to read following news:    
 http://www.uggbootsstore.net/


Previous Comments:
------------------------------------------------------------------------

[2009-12-24 01:03:10] uggabc at yahoo dot cn 

It is a wonderful article,I like it!Welcome to read following news:    
 http://www.uggbootsstore.net/

------------------------------------------------------------------------

[2009-12-24 01:02:10] uggabc at yahoo dot cn 

It is a wonderful article,I like it!Welcome to read following news:    
 <a href="http://www.uggbootsstore.net/";>uggs outlet</a>

------------------------------------------------------------------------

[2009-10-31 01:24:28] ET at 126 dot COM

<a href="http://www.baidu.com";>baidu</a>
[url=www.google.com]google[/url]
[url=http://www.sina.com]sina[/url]
[url="http://www.baidu.com"]baidu[/url]
[link=http://www.yahoo.com]yahoo[/link]

------------------------------------------------------------------------

[2009-10-24 00:53:35] linlixiang123 at 126 dot com

As there are number of ways by which <a
href="http://www.jordanshoes100.com";>jordan shoes</a>  your hair, but
you will find using hair straightener easy. <a
href="http://www.jordanshoes100.com";>air jordan shoes</a>   Today
something that no person will be without is his or her <a
href="http://www.jordanshoes100.com";>cheap jordan shoes</a> .Since hair
straightener has become an essential part of so it is wise to check that
they are in good condition and do not need replacing if you have had
your.

------------------------------------------------------------------------

[2005-11-27 22:11:06] w...@php.net

We managed to reproduce the problem; it's a problem with the query
rewriter when it maps :name to ?.  If the string is embedded in the SQL
using single quotes, but has double quotes backslashed, the string it
too tricky for the parser to follow, and it ends up transforming parts
of the serialized string that it shouldn't.

There are three possible workarounds for this issue, in order of
preference:
- Don't embed serialized data into the query string; use bound
parameters (that's what they're there for).  In future versions of PDO,
prepared statements may be cacheable in persistent connections, leading
to a performance gain.
- Use PDO::quote() to correctly quote the string
- Use PDO::exec() to fire off this UPDATE/INSERT statement; it uses an
alternate API that doesn't need to handle parameters.


------------------------------------------------------------------------

The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
    http://bugs.php.net/35368

-- 
Edit this bug report at http://bugs.php.net/?id=35368&edit=1

Reply via email to