Welcome Guest, Not a member yet? Register   Sign In
DB Active Record Class WHERE question
#5

[eluser]JasonSTX[/eluser]
I guess it isn't a good idea to assume that the parameters information was already cleaned.

But you could change it from:
$this->parameters['keyword']
to:
$this->db->escape($this->parameters['keyword'])

But binding the data means you don't have to remember to escape. I was just trying to think of how to do it while still building the query the same way.


Messages In This Thread
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 05:50 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:19 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:27 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:33 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:38 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:43 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 07:45 PM
DB Active Record Class WHERE question - by El Forum - 12-05-2007, 08:06 PM
DB Active Record Class WHERE question - by El Forum - 12-06-2007, 09:43 AM



Theme © iAndrew 2016 - Forum software by © MyBB