> > When you suck the data back out you'll obviously need to
> > stripslashes() to get rid of the 'escape' chars you added above.
>
> Nope, because the escape characters don't actually get added to the
> database.
> When the database's command interpreter sees it, it removes
> the esc
On Sat, 18 May 2002, David Freeman wrote:
> As a general rule, though, you'll need to 'escape' anything that your
> database won't like - this is typically the ' and " chars. Addslashes()
> will do that for you. Anything else you want to do depends on what you
> need the data for.
>
> When you
> I've read the documentation but am still confused about what
> to use when.
>
> When passing data from forms to database, which do I use?
> When retrieving data from database to display in forms,
> which do I use?
Kinda depends on what you're using the data for really. If you don't
c
On Fri, 17 May 2002, Don wrote:
> I have forms that retrieve date from mysql databases and send (for
> storage) data to same databases. I note many functions to make sure
> that the data is correct in appearance when it comes to special
> characters.
>
> addslashes()
> stripslashes()
> htmlspeci
Don:
> I have forms that retrieve date from mysql databases and send (for
> storage) data to same databases. I note many functions to make sure
> that the data is correct in appearance when it comes to special
> characters.
>
> addslashes()
> stripslashes()
> htmlspecialchars()
> htmlentities()
5 matches
Mail list logo
