RE: [msql-list] msqlEncode() ?

From: David J. Hughes (bambi@Hughes.com.au)
Date: Tue Apr 08 2003 - 15:16:50 PDT


the msqlEncode function was a convenience function provided by
the Lite module, not the API library. It didn't make it over
to the Ember version of the module (although it can certainly
be added).

As in interim, you can do it yourself in Ember using the
following

        $foo = sub($foo,"\\","\\\\");
        $foo = sub($foo,"'","\\'");

Bambi
..

> -----Original Message-----
> From: owner-msql-list@lists.hughes.com.au
> [mailto:owner-msql-list@lists.hughes.com.au]On Behalf Of Mona
> Wong-Barnum
> Sent: Wednesday, 2 April 2003 2:05 PM
> To: msql-list@lists.hughes.com.au
> Subject: [msql-list] msqlEncode() ?
>
>
>
> In lite, there was a msqlEncode() function. I don't see
> this function
> in ember/w3e anymore. Uh, is there a replacement or is msql able
> to take all
> input characters now?
>
> Speaking of input, security-conscious people have always
> said that all
> user input should be sanitized (checked and converted if
> necessary), what is a
> good way to do this in w3e?
>
> thanks,
> Mona
>
> ==================================================================
> Mona Wong-Barnum
> National Center for Microscopy and Imaging Research
> University of California, San Diego
> http://ncmir.ucsd.edu/
>
> "While you are busy dancing for others, just remember that
> others are also busy dancing for you"
> (A Landmark Instructor)
> ==================================================================
>
>
> -----------------------------------------------------------------
> This is the Mini SQL Mailing List operated by Hughes Technologies
> To unsubscribe, go to http://www.Hughes.com.au/extras/email/
>
-----------------------------------------------------------------
This is the Mini SQL Mailing List operated by Hughes Technologies
To unsubscribe, go to http://www.Hughes.com.au/extras/email/



This archive was generated by hypermail 2b30 : Thu May 01 2003 - 00:20:01 PDT