FUDforum: comp.lang.php » str_replace does not like empty quotes

Home » Imported messages » comp.lang.php » str_replace does not like empty quotes

Show: Today's Messages :: Polls :: Message Navigator

Re: str_replace does not like empty quotes [message #186282 is a reply to message #186259]

Sun, 22 June 2014 23:20

Geoff Muldoon
Messages: 19
Registered: July 2011

Karma:

Junior Member

jstucklex(at)attglobal(dot)net says...

>> Of course, bind variables are massively better, but I doubt that
Richard
>> is up to knowing about them yet.

> One opinion. But bound values have their problems, also. They are
> neither better nor worse than properly escaping values. Just another
> way of doing things.

Hmm, I've never really found any signifcant down-side to using bind
variables if they are used corrctly, so I'd appreciate any links you
might have.

IMHO three of the main pluses are:

a) A strong (but not totally foolproof) barrier against SQL injection
attacks.

b) On certain platforms (perhaps on Oracle more so than MySQL, etc.) the
ability to shared pool cache or soft-parse rather than hard-parse a
particular execution plan, often significantly increasing performance
when querying the same columns from the sames tables.

c) Parameter input values do not NEED to be properly escaped.

http://en.wikipedia.org/wiki/Prepared_statement

GM

Report message to a moderator

[Message index]

		str_replace does not like empty quotes By: Mr Oldies on Thu, 19 June 2014 23:33
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Fri, 20 June 2014 00:09
		Re: str_replace does not like empty quotes By: Lew Pitcher on Fri, 20 June 2014 00:11
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Fri, 20 June 2014 00:55
		Re: str_replace does not like empty quotes By: Doug Miller on Fri, 20 June 2014 03:23
		Re: str_replace does not like empty quotes By: Thomas 'PointedEars' on Fri, 20 June 2014 07:31
		Re: str_replace does not like empty quotes By: Arno Welzel on Fri, 20 June 2014 01:19
		Re: str_replace does not like empty quotes By: Arno Welzel on Fri, 20 June 2014 01:21
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Fri, 20 June 2014 01:33
		Re: str_replace does not like empty quotes By: Arno Welzel on Fri, 20 June 2014 02:06
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Fri, 20 June 2014 02:26
		Re: str_replace does not like empty quotes By: Mr Oldies on Fri, 20 June 2014 02:13
		Re: str_replace does not like empty quotes By: Doug Miller on Fri, 20 June 2014 03:26
		Re: str_replace does not like empty quotes By: Arno Welzel on Fri, 20 June 2014 09:01
		Re: str_replace does not like empty quotes By: Arno Welzel on Fri, 20 June 2014 09:02
		Re: str_replace does not like empty quotes By: Denis McMahon on Fri, 20 June 2014 15:38
		Re: str_replace does not like empty quotes By: Denis McMahon on Fri, 20 June 2014 15:32
		Re: str_replace does not like empty quotes By: Denis McMahon on Fri, 20 June 2014 01:59
		Re: str_replace does not like empty quotes By: Doug Miller on Fri, 20 June 2014 03:25
		Re: str_replace does not like empty quotes By: Geoff Muldoon on Fri, 20 June 2014 06:10
		Re: str_replace does not like empty quotes By: Christoph Michael Bec on Fri, 20 June 2014 11:48
		Re: str_replace does not like empty quotes By: Denis McMahon on Fri, 20 June 2014 15:40
		Re: str_replace does not like empty quotes By: Geoff Muldoon on Sun, 22 June 2014 00:05
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Sun, 22 June 2014 00:08
		Re: str_replace does not like empty quotes By: Geoff Muldoon on Sun, 22 June 2014 23:20
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Mon, 23 June 2014 00:44
		Re: str_replace does not like empty quotes By: Geoff Muldoon on Mon, 23 June 2014 06:33
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Mon, 23 June 2014 13:07
		Re: str_replace does not like empty quotes By: Geoff Muldoon on Tue, 24 June 2014 02:34
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Tue, 24 June 2014 03:07
		Re: str_replace does not like empty quotes By: Doug Miller on Tue, 24 June 2014 11:12
		Re: str_replace does not like empty quotes By: Jerry Stuckle on Tue, 24 June 2014 12:01
		Re: str_replace does not like empty quotes By: Olaf S. on Tue, 24 June 2014 06:13
		Re: str_replace does not like empty quotes By: Arno Welzel on Tue, 24 June 2014 08:44
		Re: str_replace does not like empty quotes By: Denis McMahon on Tue, 24 June 2014 18:48
		Re: str_replace does not like empty quotes By: Christoph Michael Bec on Tue, 24 June 2014 19:53
		Re: str_replace does not like empty quotes By: Thomas 'PointedEars' on Tue, 24 June 2014 20:08

Previous Topic:	PDO fetch with SQL server
Next Topic:	Putting it all together

Goto Forum:

-=] Back to Top [=-

[ Syndicate this forum (XML) ] [

]

Current Time: Mon May 13 12:29:55 GMT 2024

Total time taken to generate the page: 0.05350 seconds