hokietoner Posted April 4, 2008 Share Posted April 4, 2008 I'm doing something like this using PDO: $stmt = $handle->prepare("INSERT INTO table (name, userId) VALUES (?, ?)"); $stmt->execute(array($name, $userId)); I know that PDO prevents against SQL injection by doing the quote escaping for me, but I'm noticing that the escape is being stored in the table. Normally, if my sql was "INSERT INTO table (col) VALUES ('foo\'bar')" Then the data inserted would be foo'bar But using PDO, the data in the table is foo\'bar How do I prevent the backslash from being stored in the table? Thanks Link to comment https://forums.phpfreaks.com/topic/99560-pdo-database-insert-causes-quotes-to-be-escaped-in-the-table/ Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.