PHP - mysql_real_escape_string() vs. mysql_escape_string()

Invitation code test · Posted on 2/17/2015 9:31:20 AM

1. Similarities:
Both can escape special characters in query strings
(characters that can be escaped)
\x00
\n
\r
\
'
"
\x1a
(Characters that cannot be escaped)
%
_

2. Differences:
（1）mysql_real_escape_string()
1) It has two parameters
parameter string, required. Specifies the string to be escaped.
parameter connection, optional. Specify MySQL connections. If not specified, the previous connection is used.

(2) The function takes into account the character set of the current database link when escaping, mysql_escape_string() does not have this function

(3) Before using it to escape the query string, a database connection must be established first, otherwise the function will always return bool(false)

(2) mysql_escape_string() has only one parameter string, and you don't need to establish a database connection before using it

PHP - mysql_real_escape_string() vs. mysql_escape_string()

Sections viewed