Posted By

jmiller on 11/01/09

Tagged

mysql
sql
query

Versions (?)

Last Edited at 11/01/09 12:47pm

Statistics

Viewed 1889 times

Favorited by 3 user(s)

Related snippets

mysql_safe_query to prevent SQL injection

/ Published in: PHP

Expand | Embed | Plain Text

Copy this code and paste it in your HTML

function mysql_safe_string($value) {
    if(empty($value))           return 'NULL';
    elseif(is_string($value))   return '\''.mysql_real_escape_string(trim($value)).'\'';
    elseif(is_numeric($value))  return $value;
    elseif(is_array($value))    return implode(',',array_map('mysql_safe_string',$value));
    else                        return false;
}
 
function mysql_safe_query($format) {
    $args = array_slice(func_get_args(),1);
    $args = array_map('mysql_safe_string',$args);
    $query = vsprintf($format,$args);
    return mysql_query($query);
}