php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #14419 Please use Character-enable mysql_escape
Submitted: 2001-12-11 03:41 UTC Modified: 2002-06-01 13:02 UTC
From: ycheng at sinica dot edu dot tw Assigned: zak (profile)
Status: Closed Package: MySQL related
PHP Version: 4.1.0 OS: All
Private report: No CVE-ID: None
Welcome back! If you're the original bug submitter, here's where you can edit the bug or add additional notes.
If you forgot your password, you can retrieve your password here.
Password:
Status:
Package:
Bug Type:
Summary:
From: ycheng at sinica dot edu dot tw
New email:
PHP Version: OS:

 

 [2001-12-11 03:41 UTC] ycheng at sinica dot edu dot tw
in file php-4.1.0/ext/mysql/php_mysql.c line 1365
-------------------------------
Z_STRLEN_P(return_value) = mysql_escape_string(Z_STRVAL_P(return_value), Z_STRVAL_PP(str), Z_STRLEN_PP(str));
-------------------------------
could you change from
mysq_escape_string into mysql_
to something like
#if MYSQL_VERSION_ID < 32321
        len = mysql_escape_string(out, in, size);
#else
        if (self) {
                check_connection(self);
                len = mysql_real_escape_string(&(self->connection), out, in, size);
        }
        else
                len = mysql_escape_string(out, in, size);
#endif

(quote from mysql python module)

Patches

Pull Requests

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-12-31 19:11 UTC] zak@php.net
Thanks for the suggestion!

I will investigate this.

 [2002-06-01 13:02 UTC] georg@php.net
Thank you for your bug report. This issue has already been fixed
in the latest released version of PHP, which you can download at 
http://www.php.net/downloads.php

Since Version 4.0.2 we have the php function mysql_real_escape_string. The function mysql_escape_string is deprecated. (Also described in the manual)

Georg
 
PHP Copyright © 2001-2025 The PHP Group
All rights reserved.
Last updated: Wed May 07 08:01:27 2025 UTC