Geek asks and answers

Is mysql_real_escape_string safe?

OK, I have one question before starting MySQL coding in my school project. Is mysql_real_escape_string safe? I heard that it is still unsafe to use. Are there any tweaks that make SQL query safe? I have used mysql_real_escape_string many times, but I am not creating a site for my school, so the first thing I should check is security.

+6
source share
1 answer

UPDATE : the answer below was, to my knowledge, correct at the time of writing. The fact is that mysql_real_escape_string is not safe and never was. You should always use prepared statements instead.

mysql_ * , 7 . .

mysql_real_escape_string (.. , PHP ), , , , . , HTML- .

, mysql_real_escape_string, , .

+6

More articles:


All Articles