behz4d

Thank you Pikachu2000 Now i'm completely cleared, I though this function is supposed to change or replace some strings which we want to insert into the database, but i was wrong. Thank you in advance

thanks for your quick reply ! you were right, but can i ask about this function ? in general, what are the dangerous chars which we should prevent to be inserted into the database ? what does this function do ? which characters this function filters ? and at last, you mean, if we have such string in our database, is it OK : " this i a ' test " another thing, how i can see if the function is working or not ? plz give me a string which changes after using mysql_real_escape_string and inserted into db... i mean this should affect on strings which we insert into db, but when i use this function on this string : " this i a ' test ", the inserted string is all the same, so what's the point ? sorry for being noob

Hello everybody, I'm inserting a $keyword to my database, and for preventing SQL Injections i'm using mysql_real_escape_string function to escape dangerous characters, but the problem is : When i use mysql_real_escape_string ONCE on $keywordm it's not working, I MUST USE mysql_real_escape_string TWICE ! see this : $keywords = "this is a ' test !"; $keywords = mysql_real_escape_string($keywords); mysql_query("INSERT INTO table_name (keyword) VALUES ('$keywords')"); the inserted keyword is : this is a ' test ! but when i try mysql_real_escape_string TWICE, then it's fine : $keywords = "this is a ' test !"; $keywords = mysql_real_escape_string($keywords); $keywords = mysql_real_escape_string($keywords); mysql_query("INSERT INTO table_name (keyword) VALUES ('$keywords')"); the inserted keyword is : this is a \' test ! what is the problem !? why I need to use this function twice to make it works ? I would appreciate any kind of help Regards

Hi Waddy, I have exactly the same problem, can you explain this more since I haven't figured it out yet ? I am newbie to MySql, and I even have questions about relationships between tables see, we have two tables: Clients, Services and we want to show a specific client services matching by ID ! how we should relate these to tables to each other ? and then how to query ? Thank you in advanced