Home/ Questions/Sample about mysqli_real_escape_string in php
Next
In Process
Blake Roy
  • 27
Asked: 2022-05-21T18:34:24+00:00 In:

Sample about mysqli_real_escape_string in php

  • 27

. Advertisement .

..3..

. Advertisement .

..4..

I need some samples for “mysqli real escape string in php”? Can someone from the community help me?.

♦ Suggestions of ITtutoria Team
mysqli_real_escape_string is a function that is automatically called when using mysql. It can be used to escape special characters such as the escape character, which lets you embed some SQL commands into your PHP code without worrying about any errors.

Here is a case study for you

<?php
​
mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT);
$mysqli = mysqli_connect("localhost", "my_user", "my_password", "world");
​
$city = "'s-Hertogenbosch";
​
/* this query with escaped $city will work */
$query = sprintf("SELECT CountryCode FROM City WHERE name='%s'",
    mysqli_real_escape_string($mysqli, $city));
$resu = mysqli_query($mysqli, $query);
printf("Select returned %d rows.\n", mysqli_num_rows($result));
​
/* this query will fail, because we didn't escape $city */
$query = sprintf("SELECT CountryCode FROM City WHERE name='%s'", $city);
$result = mysqli_query($mysqli, $query);
​
​
Share

1 Answer

  1. mysql_real_escape_string($user); //Use before implementing in MYSQL query
//for data safe handling and avoiding hacking injection in Database
    • 5

Leave an answer

You must login to add an answer.

Need An Account,