SQL language programming learning implementation code for escaping mysql statements in php

WBOY
Release: 2016-07-29 08:45:39
Original
1163 people have browsed it

It is impossible for you to manually escape every such special character, not to mention that you usually deal with content that is automatically submitted by the form.
So, the mysql_real_escape_string function should be used:
mysql_real_escape_string — Escapes special characters in strings used in SQL statements, taking into account the current character set of the connection.
But note: this function does not escape % and _. In addition, it is best not to use this function for the entire SQL statement, but to escape only the string parameters passed into the SQL statement, otherwise unexpected results will occur.
Script example:

Copy code The code is as follows:


$item = "Zak's and Derick's Laptop";
$escaped_item = mysql_real_escape_string($item);
printf ("Escaped string : %sn", $escaped_item);
?>

The above introduces the implementation code of escaping mysql statements in php for sql language programming learning, including the content of sql language programming learning. I hope it will be helpful to friends who are interested in PHP tutorials.

Related labels:
source:php.cn
Statement of this Website
The content of this article is voluntarily contributed by netizens, and the copyright belongs to the original author. This site does not assume corresponding legal responsibility. If you find any content suspected of plagiarism or infringement, please contact admin@php.cn
Popular Tutorials
More>
Latest Downloads
More>
Web Effects
Website Source Code
Website Materials
Front End Template
About us Disclaimer Sitemap
php.cn:Public welfare online PHP training,Help PHP learners grow quickly!