php - Slashes in MySQL tables, but using PDO and parameterized queries. Whats up? -

-

alright, code update database tables varying flavours of following:

$query = "   insert comment      (comment, commentdate, rating, userrid)    values      (:comment, now(), 0, :userrid )" ;  try {              $db_conn = new pdo('mysql:host='.$db_server.';dbname='.$db_name, $db_username, $db_password );    $db_conn->begintransaction();   $prep = $db_conn->prepare($query);   $prep->bindparam(':comment', $comment, pdo::param_str, 500);   $prep->bindparam(':userrid', $userrid, pdo::param_int, 20);   $prep->execute();    $db_conn->commit(); } catch (pdoexception $e)  {   $db_conn.rollback();   echo "error!: " . $e->getmessage() . "<br/>";   die(); }

in above, comment comes in via post page. userrid being set via function call. works properly, except slashes added table.

everything i've read says in order around having slashes whenever types in apostrophe should using parameterized queries. if i'm not mistaken, i'm pretty sure that's i'm doing. missing something? can let me know i'm not doing right?

thanks in advance, michael

probably ou've magic_quotes_gpc() turned on, need this:

if (get_magic_quotes_gpc() == true) {     $comment = stripslashes($comment);     $userrid = stripslashes($userrid); }

if you're using php 5.3+ can rid of magic quoted variables placing following lines of code on top of file:

if (get_magic_quotes_gpc() === 1) {     $_get = json_decode(stripslashes(json_encode($_get, json_hex_apos)), true);     $_post = json_decode(stripslashes(json_encode($_post, json_hex_apos)), true);     $_cookie = json_decode(stripslashes(json_encode($_cookie, json_hex_apos)), true);     $_request = json_decode(stripslashes(json_encode($_request, json_hex_apos)), true); }

if you're running lower version of php should take @ page.


Comments

Post a Comment

Popular posts from this blog

sql - invalid in the select list because it is not contained in either an aggregate function -

-
i can't figure out rewrite sql statement avoid error below msg 8120, level 16, state 1, line 26 column 'staffmember.staffmemberid' invalid in select list because not contained in either aggregate function or group clause. sql statment select (select [dbo].[udf_readstaffmemberbasic](sm.staffmemberid) xml path ('staffmembersummary'), root ('items'), type ), count(sm.staffmemberid) totalresults, ceiling(cast(count(sm.staffmemberid) decimal)/ @pagesize) totalpages staffmember sm inner join staffmembertoadditionalrole ar on sm.staffmemberid = ar.staffmemberid (sm.firstname '%' + @name + '%' or sm.surname '%' + @name + '%') , (@floorid null or sm.floorid = @floorid) , (@directorateid null or sm.directorateid = @directorateid) , (@additionalroleid null or ar.additionalroleid = @additionalroleid) order sm.staffmemberid offset @page * @pagesize rows fe...
Read more

Angularjs unit testing - ng-disabled not working when adding text to textarea -

-
i trying test angularjs component using karma, mocha, power-assert. have textarea , button in component, button disabled based on length of text in textarea. when run component in browser works perfectly. can't figure out how test functionality. here's bit of code. inquiryform.js function inquiryform($scope) { // plan add logic here } angular.module('myapp').component('inquiryform', { controller: inquiryform, controlleras: 'inquiryform', templateurl: 'inquiryform.html' }); inquiryform.html <div class="contact"> <div>thanks contacting us.</div> <form> <textarea ng-model="inquiryform.inquirytext" name=""></textarea> <input type="submit" value="send" ng-disabled="!inquiryform.inquirytext.length"> </form> </div> inquiryformtest.js describe('inquiry form ', () => { let $r...
Read more

How to start daemon on android by adb -

-
can me please, head swollen... i trying run daemon on android emu/device command: adb -s <device_name> shell su -c /dir/daemon <port_number> but nothink happens, , no errors! if do: adb -s <device> shell and form shell cmdline: su -c /dir/daemon <port_number> than work fine. try use shell-script , run: adb -s <device_name> shell sh su -c /dir/script.sh <port_number> and try generate script qt code port number , use: adb -s <device_name> shell sh su -c /dir/script.sh but not helped... problem if enter adb shell previous run daemon - work. problem on different device/emu/iso_image different command format not work. example: adb -s <device_name> shell su -c /dir/daemon <port_number> // work @ emu, not @ iso and vice: adb -s <device_name> shell su -c "/dir/daemon <port_number>" // work @ iso etc. everybody can answer what's matter? sorry english adb shell su -c ...
Read more