(PECL ingres >= 2.1.0)
Escape special characters for use in a query
string ingres_escape_string ( resource $link, string $source_string )
ingres_escape_string() is used to escape certain characters within a string before it is sent to the database server.
Parameters:
link
The connection link identifier
source_string
The source string to be parsed
Returns:
Returns a string containing the escaped data.
Examples:
Escape special characters for use in a query
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 | <?php $link = ingres_connect( $database , $user , $password ); $last_name = "O'Connor" ; $sql = sprintf( "select * from user_profile where up_last = '%s'" , ingres_escape_string( $link , $last_name )); $result = ingres_query( $link , $sql ); while ( $user = ingres_fetch_object( $result )) { echo $user ->up_first . '<BR/>' ; } ingres_commit( $link ); ingres_close( $link ); ?> |
See also:
Please login to continue.