php.net |  support |  documentation |  report a bug |  advanced search |  search howto |  statistics |  random bug |  login
Bug #14419 Please use Character-enable mysql_escape
Submitted: 2001-12-11 03:41 UTC Modified: 2002-06-01 13:02 UTC
From: ycheng at sinica dot edu dot tw Assigned: zak (profile)
Status: Closed Package: MySQL related
PHP Version: 4.1.0 OS: All
Private report: No CVE-ID: None
View Add Comment Developer Edit
Welcome! If you don't have a Git account, you can't do anything here.
You can add a comment by following this link or if you reported this bug, you can edit this bug over here.
(description)
Block user comment
Status: Assign to:
Package:
Bug Type:
Summary:
From: ycheng at sinica dot edu dot tw
New email:
PHP Version: OS:

 

 [2001-12-11 03:41 UTC] ycheng at sinica dot edu dot tw
in file php-4.1.0/ext/mysql/php_mysql.c line 1365
-------------------------------
Z_STRLEN_P(return_value) = mysql_escape_string(Z_STRVAL_P(return_value), Z_STRVAL_PP(str), Z_STRLEN_PP(str));
-------------------------------
could you change from
mysq_escape_string into mysql_
to something like
#if MYSQL_VERSION_ID < 32321
        len = mysql_escape_string(out, in, size);
#else
        if (self) {
                check_connection(self);
                len = mysql_real_escape_string(&(self->connection), out, in, size);
        }
        else
                len = mysql_escape_string(out, in, size);
#endif

(quote from mysql python module)

Patches

Add a Patch

Pull Requests

Add a Pull Request

History

AllCommentsChangesGit/SVN commitsRelated reports
 [2001-12-31 19:11 UTC] zak@php.net
Thanks for the suggestion!

I will investigate this.

 [2002-06-01 13:02 UTC] georg@php.net
Thank you for your bug report. This issue has already been fixed
in the latest released version of PHP, which you can download at 
http://www.php.net/downloads.php

Since Version 4.0.2 we have the php function mysql_real_escape_string. The function mysql_escape_string is deprecated. (Also described in the manual)

Georg
 
PHP Copyright © 2001-2024 The PHP Group
All rights reserved.
Last updated: Thu May 02 13:01:30 2024 UTC