Diese Seite bei php.net
The PHP manual text and comments are covered by the Creative Commons Attribution 3.0 License © the PHP Documentation Group - Impressum - mail("TO:Reinhard Neidl",...)
(PECL CUBRID >= 8.3.0)
cubrid_real_escape_string — Returns the escaped string version of the given string
This function returns the escaped string version of the given string. It pre-appends backslashes to the following characters: '. This function must always (with few exceptions) be used to make data safe before sending a query to CUBRID.
The string that is to be escaped.
The CUBRID connection. If the connection identifier is not specified, the last link opened by cubrid_connect() is assumed.
Escaped string version of the given string, on success.
FALSE on failure.
Beispiel #1 cubrid_real_escape_string() example
<?php
$user = "'username'";
$password = "\"pass\"";
$query = sprintf("SELECT * FROM users WHERE user='%s' AND password='%s'",
cubrid_real_escape_string($user),
cubrid_real_escape_string($password));
echo $query;
?>
Das oben gezeigte Beispiel erzeugt folgende Ausgabe:
Result: SELECT * FROM users WHERE user='\'username\'' AND password='"pass"'
Diese Seite bei php.net