From: Matthew M. <ma...@tu...> - 2002-12-09 17:08:41
|
> sqlInsert and sqlUpdate will take charge of the addslashes issue. They > will automatically test text before it is saved. The developer will > never worry about the save format. Ok, this has been committed. As a refresher: You don't need to addslashes to anything before sending it to sqlInsert and/or sqlUpdate now. They will take care of it. You do not need to serialize arrays or (ick, not) objects before sending them to sqlInsert and/or sqlUpdate. You DO have to unserialize after a sqlSelect. I could have this done automatically but it would exponentially increase its process time. The 'parse' function should not be used any more. Use parseInput to remove unwanted tags and parseOutput to remove profanity and to break the text. You might want to grep your modules for parse and addslashes to clean it up. Please respond if you have any problems. Matt -- Matthew McNaney Internet Systems Architect Electronic Student Services Appalachian State University Phone: 828-262-6493 phpwebsite.appstate.edu ess.appstate.edu |