php - mysql real escape string - is this normal? -


When I use mysqli- gt; Use real_escape_string and add string value to db such as "which is", this string adds in any way without amending the quote when I check DB, the value inside it is "which is"

When I read mysqli-> I do not use real_escape_string and connect a string with a quote like "which is", so it is not found anywhere in the database.

Is not it normal, is it?

Yes, it is. It is difficult to answer the question more broadly than anyone else.

real_escape_string () only rescues data is therefore used safely in a query, it can be modified in any way When you do not leave it, there is a syntax error in the query, so it fails - and the data is not included.

While using the safest way to avoid your data.

Comments

Popular posts from this blog

Python SQLAlchemy:AttributeError: Neither 'Column' object nor 'Comparator' object has an attribute 'schema' -

java - How not to audit a join table and related entities using Hibernate Envers? -

mongodb - CakePHP paginator ignoring order, but only for certain values -