Zand Php Cake Php

Posted by : Phper
Must mysql_escape_string() be applied to every data coming from the client-side?


Is it very risky if mysql_escape_string() is not applied?
 
 
Posted by : Phper
Re : Must mysql_escape_string() be applied to every data coming from the client-side?
Let me replace mysql_escape_string() with mysql_real_escape_string()

in my question.
 
 
Posted by : Bobby Easland
Re : Must mysql_escape_string() be applied to every data coming from the client-side?
Yes.  Alternative is bound parameters ala mysqli or PDO
 
 
If you have the better reply, then send it to us. We will display your reply after the approval.
Name : 
Email Id :   
Reply :