mysql_real_escape_string & NULL record

[robert_gsfame]

i really confused with this

$email="blabla";

$update=sprintf("UPDATE table SET $column1='%s' WHERE column2='%s'",

 

mysql_real_escape_string($email),

mysql_real_escape_string(''));

 

can i update column1 when the condition of column2 is NULL, using ( ' ' )

so the code will look like

 

mysql_real_escape_string('') or it should be mysql_real_escape_string(0) ??

 

thanks

[robert_gsfame]

i mean this mysql_real_escape_string(NULL) or mysql_real_escape_string('')?

[JAY6390]

'' and NULL are not the same thing. '' is an empty string, and NULL is as it says nothing

 

I would also recommend using my mressf function. It works exactly the same as the sprintf function, but you don't need to use mysql_real_escape_string to all of the parameters as it does it automatically

 

 

[mikesta707]

why are you applying mysql_real_escape_string to empty data anyways?

[JAY6390]

lol good point!