| Re: function for preserving special characters? [message #186087 is a reply to message #186084] |
Fri, 13 June 2014 14:26   |
Christoph Michael Bec
Messages: 207
Registered: June 2013
Karma:
|
Senior Member |
|
|
Tim Streater wrote:
> In article <539afd73$0$6602$9b4e6d93(at)newsspool4(dot)arcor-online(dot)net>,
> Christoph Michael Becker <cmbecker69(at)arcor(dot)de> wrote:
>
>> Tim Streater wrote:
>>
>>> In article <4s7xh8hg1pcy(dot)ov70m21znbte$(dot)dlg(at)40tude(dot)net>, richard
>>> <noreply(at)example(dot)com> wrote:
>>>> > When attempting to transfer records from one table to another,
>> certain
>>>> records refuse to be.
>>>> Such as those with words like "I'm".
>>>> What's even more confusing is, "It's" won't work, but "Cathy's" is ok?
>>>>
>>>> I know there is a procedure in PHP for dealing with this.
>>>> I just can't find it right now.
>>>> Can anyone help on this?
>>>> You need to read up on your database and find how it deals with
>> things
>>> like single-quotes (') in strings that you want to update a column
>>> with. Or rather, how it expects *you* to present the data.
>>>> For SQLite, I do this:
>>>> $x = str_replace ('\'', '\'\'', $xx);
>>
>> However, remember Bobby Tables: <http://xkcd.com/327/>.
>
> :-) Yeah yeah.
>
> However in this case the guy doing the hacking would be the guy whose
> data would be trashed. Why destroy your own data that way when you can
> just drag the entire file to the Trash and empty it.
ACK.
However, my reply was not particularly meant for you, but also for
others who want to do this on otherwise unsanitized user input.
--
Christoph M. Becker
|
|
|
|
Calendar
Search
Help
Members
Register
Login
Home
]