18 Topics

Member Avatar for
Member Avatar for mattyd

Hello, I am currently using bound parameters in regards to user input on my form. I have read about escape strings also and thought of using both together. Is this possible and, importantly, is it necessary considering I am already using bound parameters? I would like to use both. Thank …

Member Avatar for mattyd
0
266
Member Avatar for mattyd

Hello. I am beginning the process of coverting all of my MySQL to MySQLi. I have been doing much research on this but find it a bit confusing. I have two questions at this point regarding the matter: 1) What does it exactly mean to "escape" a string and where …

Member Avatar for deceptikon
0
407
Member Avatar for Isaac_4

Here is a simple way to insert into a database that isn't much harder than using string concatenation - which we all know is very dangerous due to SQL injection attacks. Put the code snippet into `database.php`. Now, in a script handling a form post, such as `post_reply.php`: <?php require_once("database.php"); …

Member Avatar for diafol
4
498
Member Avatar for rahulhog

How to store string to a variable which contains both single & double quote? The string should be dynamic, not static. For example : *thisis'a"string* another string is : *this'i"sastring* The quotes will be vary its position. Is it possible to store these type of string to a variable? Thank …

Member Avatar for diafol
0
245
Member Avatar for zelanne74

Hi Goodmorning. I'm developing an online add cart. my problem is when a user confirm payment and after a second he/she pressed escape. payment is successful but my email notification did not sent. how will i detect if a user pressed escape. Thank you.

Member Avatar for JorgeM
0
217
Member Avatar for sarthak25
Member Avatar for woodenduck

How do I use htmlspecialchars to escape all html but then allow two tags? I've escaped my text but want to allow the following two tags: img iframe Is there an easy way to do this? I never had a class on php so everything I know is self taught. …

Member Avatar for diafol
0
161
Member Avatar for cool_zephyr

I got a string `\x3Cb\x3EHello, World\x3C\x2Fb\x3E` as a webresponse..i think it means `<b>Hello, World</b>` but i don't know how to unescape that sequence into java string..could anyone please help me with this?? Thank you.

Member Avatar for cool_zephyr
0
621
Member Avatar for games1124u

Hello, i want to know if somebody could help me to make this script safe. Like how to put mysql_real_escape_string. Or how to use preg_split, or htmletities.... <?php include 'extern/connect.php'; $categories = file_get_contents('extern/categories.php'); $footer = file_get_contents('extern/footer.php'); $logo = file_get_contents('extern/logo.php'); $report = file_get_contents('extern/report.php'); ?> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" …

Member Avatar for pritaeas
0
376
Member Avatar for dewdropz

Hi I am looking for some information regarding VT102 escape codes. Are there any tutorials on this anyone can recommend? Basically, what I need to do is overwrite these print statements within the for loop to my screen: for (int i=0;i<5;i++) { printf("Enter the current price of the product: "); …

Member Avatar for rubberman
0
217
Member Avatar for sunfutbol

The code is as follows and I wanted to know more about how and where \v and \f are used? printf("Vertical tab \v is tricky, as its behaviour is unspecified under certain conditions.\n"); Also, can anyone explain what the sentence in the print statement suggests?

Member Avatar for WaltP
0
175
Member Avatar for archie.herbias
Member Avatar for Arhur.C
-1
152
Member Avatar for Virangya

hi, i've been trying to solve this but no luck. This is my code [CODE]$replace1 =str_replace('hreflang=\"'.$arr['variantslang1hid'].'\" lang=\"'.$arr['variantslang1hid'].'\"','hreflang=\"'.$arr['variantslang1'].'\" lang=\"'.$arr['variantslang1'].'\"',$replace1);[/CODE] it should replace but no. i'm not escaping "" properly. how can i solve this? help much appreciated!

Member Avatar for Virangya
0
247
Member Avatar for RazorRamon

I've been looking to secure a site that has many queries involved. I've always known about mysql real escape string for a while but recently i ran across prepared statements. I had a few questions about them. Is it a good idea to use both? is this over kill? When …

Member Avatar for diafol
0
155
Member Avatar for woopi

How do I deal with quotes here? What i want is /[^a-zA-Z0-9-_.,!()'\/"]/ but how do i deal the quotes? [CODE] $pattern = '/[^a-zA-Z0-9-_.,!()'"\/' . $whatever . ']/'; return preg_replace($pattern, '', $value); [/CODE] Cheers!

Member Avatar for woopi
0
1K
Member Avatar for end3r

Hi, As the title states, I have a query that I use to concatenate all the rows into a single string and I use the XMLTransform method to accomplish that but I still need to add a new line separator within the XML string and so far I didn't find …

Member Avatar for end3r
0
851
Member Avatar for hindu times

Hi there, I have been told I need to use escape() and unescape() to fix some issues I am having with my Javascript in IE7. I've been fiddling with it for two days now and can't seem to get it working correctly. It would be amazing if someone on here …

Member Avatar for twiss
0
136
Member Avatar for Pinchanzee

I'm looking to create a 3D environment for an escape-the-room game that I'm making with Flash. I'm hoping I'll be able to do it with the 3D features of Adobe Illustrator but am unsure. I need to be able to move the view-point angle in the pictures to take the …

Member Avatar for Pinchanzee
0
330

The End.