Introduction to the use of the mysql_real_escape_string () function in PHP

This article describes the use of PHP in the mysql_real_escape_string () function, the need for friends, refer to the next bar. Define and use the mysql_real_escape_string () function to escape special characters in the string used in the SQL statement. The following characters are affected: \x00\n\r\ ' "\x1a if successful, the function returns the escaped string. If it fails, it returns false. Grammar mysql_real_escape_string (string,connection) Parameter description string required. Specifies the string to be escaped. Connection is optional. Specify MySQL connection. If not specified, the previous connection is used. Demonstrates that this function escapes special characters in a string and takes into account the current character set of the connection, so it can be used safely for mysql_query (). Hints and Notes Tip: You can use this function to prevent database attacks. Here are some examples of mysql_real_escape_string () functions for your reference. Example 1: Example 2, a database attack. Then the SQL query becomes: SELECT * from Userswhere user= ' John ' and password= ' or ' = ', that is, any user can log in without entering a valid password. Example 3:

