escape_str in mysql |
[eluser]displaynone[/eluser]
I have been looking for a similar bug, but I don't find it, so I decide to write a new one. When I try to escape a string using escape_str function, I get incorrect results. For example: Code: $query = $this->db->query('insert into table values (?, ?)', array('value1', 'value2 /\/\/\')); Code: insert into table values ('value1', 'value2 /\/\/\') The escape_str function is this: Code: function escape_str($str) Thanks for your time and sorry for my english
[eluser]displaynone[/eluser]
Sorry!! I was wrong when I talk about the code of escape_str in MySQL, it's mssql code, but I don't get a correct string escaped yet.
[eluser]displaynone[/eluser]
In the DB_driver.php, in the function compile_binds, when the char "?" is replaced by the bind, it removes the slashes "\". I add this into my CI code: Code: $sql = preg_replace('#'.preg_quote($this->bind_marker, '#').'#', str_replace('\\', '\\\\',str_replace('$', '\$', $val)), $sql, 1); Is this ok? |
Welcome Guest, Not a member yet? Register Sign In |