TalkPHP - View Single Post - SQL Injection and mysql_real_escape_string

freenity · 05-01-2008, 02:38 PM

yes, wrapping the variables in single quotes wil work fine, but you compare a number with a string, and it works on mysql, it could fail on other sql database.

05-01-2008, 02:38 PM	#5 (permalink)
freenity The Acquainted Join Date: Feb 2008 Posts: 119 Thanks: 17	yes, wrapping the variables in single quotes wil work fine, but you compare a number with a string, and it works on mysql, it could fail on other sql database. __________________ http://feudal-times.net - My PBB Game http://gwphp.feudal-times.net - My Blog "Gaming With PHP"