4 ms·

> mysql_escape_string vs. (sigh ) mysql_real_escape_string ouch

• bilalq 13y ago
  I don't think bringing up deprecated functions is valid criticism. Everyone uses PDO these days.
  • duskwuff 13y ago
    Everyone should be using PDO these days. Whether they are is another matter. :(
    • theOnliest 13y ago
      I work in a large educational institution, using PHP and MS SQL Server, and I can't convince the sysadmins to install PDO because the SQL Server PDO bindings have a big red EXPERIMENTAL sign on the page (http://php.net/manual/en/ref.pdo-dblib.php http://php.net/manual/en/ref.pdo-dblib.php). So I'm stuck using 'mssql_' functions, I'm afraid.
      • duskwuff 13y ago
        I'd suggest that a bigger problem with your situation is that you're trying to use MSSQL with PHP...
      • tmister 13y ago
        You can try the driver released from Microsoft http://sqlsrvphp.codeplex.com/ http://sqlsrvphp.codeplex.com/. Haven't tried it myself though.