function db_escape_string in Drupal 5
Same name in this branch
- 5 includes/database.mysqli.inc \db_escape_string()
- 5 includes/database.mysql.inc \db_escape_string()
- 5 includes/database.pgsql.inc \db_escape_string()
Same name and namespace in other branches
- 4 includes/database.mysqli.inc \db_escape_string()
- 4 includes/database.mysql.inc \db_escape_string()
- 4 includes/database.pgsql.inc \db_escape_string()
- 6 includes/database.mysqli.inc \db_escape_string()
- 6 includes/database.mysql.inc \db_escape_string()
- 6 includes/database.pgsql.inc \db_escape_string()
Prepare user input for use in a database query, preventing SQL injection attacks.
Related topics
4 calls to db_escape_string()
- system_update_151 in modules/
system/ system.install - tablesort_sql in includes/
tablesort.inc - Create an SQL sort clause.
- update_convert_table_utf8 in ./
update.php - Convert a single MySQL table to UTF-8.
- _db_query_callback in includes/
database.inc - Helper function for db_query().
File
- includes/
database.mysql.inc, line 399 - Database interface code for MySQL database servers.
Code
function db_escape_string($text) {
global $active_db;
return mysql_real_escape_string($text, $active_db);
}