mysql parameterised query

[B.r.K.o.N.j.A]

I'm using mysql 4.1 and php5.0.4. Since (AFAIK) this version of mysql
supports parameterised queries, is there a way to accomplish that using
mysql_... functions (looks like mysql client library is unaware of this
feature), I need it to avoid sql injection in a "right" way... :))

--

B.r.K.o.N.j.A = Bionic Robotic Knight Optimized for Nocturnal Judo and
Assasination

[Kim André Akerø]

Re: mysql parameterised query

B.r.K.o.N.j.A wrote:

I'm using mysql 4.1 and php5.0.4. Since (AFAIK) this version of mysql
supports parameterised queries, is there a way to accomplish that
using mysql_... functions (looks like mysql client library is unaware
of this feature), I need it to avoid sql injection in a "right"
way... :))

This might be what you're looking for:

http://php.net/mysql-query#69365

(see the user comment from "cc+php at c2se dot com" on that page)

--
Kim André Akerø
- kimandre@NOSPAM betadome.com
(remove NOSPAM to contact me directly)

[B.r.K.o.N.j.A]

Re: mysql parameterised query

Kim André Akerø wrote:

B.r.K.o.N.j.A wrote:
>

>I'm using mysql 4.1 and php5.0.4. Since (AFAIK) this version of mysql
>supports parameterised queries, is there a way to accomplish that
>using mysql_... functions (looks like mysql client library is unaware
>of this feature), I need it to avoid sql injection in a "right"
>way... :))

>
This might be what you're looking for:

http://php.net/mysql-query#69365

>
(see the user comment from "cc+php at c2se dot com" on that page)
>

Thanks, I've seen this one before, and that is my backup solution, but
I've been looking for something "native" :)

--

B.r.K.o.N.j.A = Bionic Robotic Knight Optimized for Nocturnal Judo and
Assasination