php - Slashes in MySQL tables, but using PDO and parameterized queries. Whats up? -

-

OK, so to update my database tables, my code is changing the taste of the following: 

  $ Query = "Comment (comment, comment, rating, userrid) value (: comment, now (), 0,: userrid)"; Try {$ db_conn = new PDF ('mysql: host ='. $ Db_server. '; Dbname ='. $ Db_name, $ db_username, $ db_password); $ Db_conn- & gt; BeginTransaction (); $ Prep = $ db_conn- & gt; Ready ($ query); $ Ready-> Beyond Parm (': Comment', $ Comment, PDO: Parama_ast, 500); $ Ready-> Bindam Parm (': userrid', $ userrid, PDO :: Paramatti, 20); $ Prep- & gt; Executed (); $ Db_conn- & gt; Committed (); } Hold (PDOException $ e) {$ db_conn.rollBack (); Echo "error !:" $ E-> Received Message () "
"; Die (); }

In the above, the comment comes from a post from another page. Setting properly through the Userrid function call, everything works well, except that the slash is added to the table.

Whatever I have read, says that to avoid slash of apoptosis, I should use questions with parameters if I am not wrong then I am absolutely sure what I do I am here. Am I forgetting something? Will someone tell me what I am not doing?

Thank you in advance, Michael

Maybe you've turned on, Need to do this: 

  if (get_magic_quotes_gpc () == true) {$ comment = stripslashes ($ comment); $ Userrid = StripsSash ($ userrid); }

If you are using PHP 5.3+ then you can get rid of all the magic quoted variables by keeping the following lines of code at the top of your file:

< Pre> if (get_magic_quotes_gpc () === 1) {$ _GET = json_decode (StripSearch (json_encode ($ _ GET, JSON_HEX_APOS)), true); $ _POST = json_decode (stripsash (json_encode ($ _ POST, JSON_HEX_APOS), true); $ _COOKIE = json_decode (StripSearch (json_encode ($ _cookie, JSON_HEX_APOS)), true); $ _REQUEST = json_decode (StripSearch (json_encode ($ _ request, JSON_HEX_APOS), true); }

If you are running the lower version of PHP, then you should.


Comments

Post a Comment

Popular posts from this blog

php - multilevel menu with multilevel array -

-
Just ask someone to solve this problem? I want to create a multilevel menu I can not find the right solution generated with multilevel array, it always gets an array_push error My study came from the original idea But still my Can not match the need. This is my MySQL [code] ----- --------------------- --------------- | ID | PARENT_ID | Name | Link | Seq | 1 | 0 | Dashboad | Dashboard / | 1 | 2 | 0 | Menu 1 | Menu 1 / | 2 | 3 | 0 | Menu 2 | Menu 2 / | 3 | 4 | 0 | Menu 3 | Menu 3 / | 4 | 5 | 2 | Joint Add / | 1 | 6 | 3 | Joint Add / | 1 | 7 | 2 | Edit | Edit / | 2 | 8 | 4 | Joint Add / | 1 ------------------------------------------ [/ Code] I want to do something like this in my array array ('dashboard' = & gt; array ('id' = & gt; '' 'Dame' = & gt; 'Dashboard', 'Title' = & gt; 'Dashboard', 'MatchMin' = & gt; Base_URL (). 'Dashboard /', 'Active' => = & Gt; NULL), ...
Read more

c# - TypeConverter in propertygrid only converts from string, not to -

-
When the property grid is reached, only the conversion mechanism (often called) is called "Foo!" Returns the property string in the grid when I click to edit I get an exception Type.oo. Object type can not be changed to type. (Not properly translated,) What is a clue from the convert format, why not? And the error indicates that it is trying to convert to a string, not from. I think that when I want to edit this object, it will have to be converted from foo to string, and when the editing ends. Public class FooTypeConverter: StringConverter {public override object ConvertFrom (ITypeDescriptorContext Reference, CultureInfo Culture, Object Value) {New Foo (string) value); } Convert the public override object (Type the ITE DiskText Contact Reference, CultureInfo Culture, Object Value, Type Type) {Return "Foo!"; } Public override bool CanConvertFrom (ITypeDescriptorContext reference, type source type) {back true; } Public Override Bull CanConvertTo (ITypeDescrip...
Read more

jQuery UI: Datepicker month format -

-
I am trying to change the format of the month that shows in the popup (not in the date that the picker actually I do not have any choice anywhere to do this, do I like to use a sub-string () or something else? What I normally display is Trying to change: Class = "ui-datepicker-title"> January & lt; / span & gt; ... & lt; / div & gt; Div>
Read more