This is a discussion on Why $_REQUEST do the same thing as mysql_escape_string() within the PHP General forums, part of the PHP Programming Forums category; I put some thing in an form input filed like this: ' " \ then submit to a php script. When use $...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
I put some thing in an form input filed like this:
' " \ then submit to a php script. When use $_GET / $_POST / $_REQUEST to get the value, I always get: \' \" \\ In php expression it should be: $_REQUEST['field'] = "\\' \\\" \\\\"; Any one who can tell me why? |
|
|||
|
On 10/17/07, truncatei@gmail.com <truncatei@gmail.com> wrote:
> I put some thing in an form input filed like this: > ' " \ > then submit to a php script. > When use $_GET / $_POST / $_REQUEST to get the value, > I always get: > \' \" \\ > In php expression it should be: > $_REQUEST['field'] = "\\' \\\" \\\\"; > > Any one who can tell me why? > magic_quotes_gpc Also it doesn't necessarily do the same thing. mysql_real_escape_string() takes into consideration character sets. |
![]() |
| Thread Tools | |
| Display Modes | |
|
|