http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html Subscribe and keep up to date with Another Way To Use Mysql_real_escape_string Instead Trim(stripslashes( with the latest replies and comments from other people like you who are interested in Another Way To Use Mysql_real_escape_string Instead Trim(stripslashes( at wallpaperama.com en http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html sometimes mysql doesn't let you insert data into your database unless its cleaned. an good way to do this is with the function: mysql_real_escape_string() example: mysql_real_escape_string($_POST['somedata']) but its better to use this instead: trim(stripslashes($_POST['somedata'])) WARNING: but if you have a website, you MUST use mysql_real_escape_string() for security http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html Fri, 12 Feb 2010 23:50:03 -0800 stripslashes, to sanatise pre-db entry? is this site a hacking site wanting people to have hghly insecure scripts? anyone reading this, forget add and strip slashes. use mysql_real_escape_string() i you get slashes from php from some other place, then use stripslashes by all means http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#105078 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#105078 Fri, 12 Feb 2010 23:50:03 -0800 this is horribly wrong, do not use this advice. http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#94604 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#94604 Fri, 12 Feb 2010 23:50:03 -0800 this is wrong... the function would be addslashes. e.g., trim(addslashes($_post['somedata' http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#94418 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#94418 Fri, 12 Feb 2010 23:50:03 -0800 what.is http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64813 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64813 Fri, 12 Feb 2010 23:50:03 -0800 sql error similar http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64812 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64812 Fri, 12 Feb 2010 23:50:03 -0800 no. stripslashes can be fooled. mysql_real_escape_string is the only action to take against sql injection http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64155 http://www.wallpaperama.com/forums/another-way-to-use-mysql-real-escape-string-instead-trimstripslashes-t5712.html#64155