php's mysql_real_escape_string doesn't work?

Question

I still get unescaped " in my DB. Here is my code:

$connection=mysql_connect ('localhost', $username, $password);

if (!$connection) {

  die('Not connected : ' . mysql_error());

}
$name = mysql_real_escape_string($name);
$address = mysql_real_escape_string($address);
$number = mysql_real_escape_string($number);
mysql_query("INSERT INTO people (name, area, phone)
VALUES ('$name', '$address', '$number')");

}

What's wrong here?

Pekka · Accepted Answer · 2011-12-26 14:23:16Z

1

What's wrong here?

Probably nothing. mysql_real_escape_string() escapes string data for the time of insertion only. That the data looks unchanged once it is inside the database is how it's meant to be.

Your code looks fine (except that you're not checking the query for errors, which you want to do so you can debug problems.)

answered Dec 26, 2011 at 14:23

Pekka

451k150 gold badges990 silver badges1.1k bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

php's mysql_real_escape_string doesn't work?

1 Answer 1

Comments

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Related