mysqli real escape string php

The real_escape_string() / mysqli_real_escape_string() function escapes special characters in a string for use in an SQL query, taking into account the current character set of the connection. Object oriented style: $mysqli -> real_escape_string(escapestring) $mysqli = new mysqli("localhost","my_user","my_password","my_db"); // Escape special characters, if any $firstname = $mysqli -> real_escape_string($_POST['firstname']); $lastname = $mysqli -> real_escape_string($_POST['lastname']); $age = $mysqli -> real_escape_string($_POST['age']); Procedural style: mysqli_real_escape_string(connection, escapestring) $con = mysqli_connect("localhost","my_user","my_password","my_db"); // Escape special characters, if any $firstname = mysqli_real_escape_string($con, $_POST['firstname']); $lastname = mysqli_real_escape_string($con, $_POST['lastname']); $age = mysqli_real_escape_string($con, $_POST['age']);

<?php mysqli_report(MYSQLI_REPORT_ERROR | MYSQLI_REPORT_STRICT); $mysqli = mysqli_connect("localhost", "my_user", "my_password", "world"); $city = "'s-Hertogenbosch"; /* this query with escaped $city will work */ $query = sprintf("SELECT CountryCode FROM City WHERE name='%s'", mysqli_real_escape_string($mysqli, $city)); $resu = mysqli_query($mysqli, $query); printf("Select returned %d rows.\n", mysqli_num_rows($result)); /* this query will fail, because we didn't escape $city */ $query = sprintf("SELECT CountryCode FROM City WHERE name='%s'", $city); $result = mysqli_query($mysqli, $query);

mysqli_real_escape_string use with ajax

jQuery(document).ready(function($){

    // hide messages 
    $("#error").hide();
    $("#sent-form-msg").hide();

    // on submit...
    $("#contactForm #submit").click(function() {
        $("#error").hide();

        //required:

        //name
        var name = $("input#name").val();
        if(name == ""){
            $("#error").fadeIn().text("Name required.");
            $("input#name").focus();
            return false;
        }

        // email
        var email = $("input#email").val();
        if(email == ""){
            $("#error").fadeIn().text("Email required");
            $("input#email").focus();
            return false;
        }

        // contact_no
        var contact_no = $("input#contact_no").val();
        if(contact_no == ""){
            $("#error").fadeIn().text("Contact number required");
            $("input#contact_no").focus();
            return false;
        }

        // comments
        var comments = $("#comments").val();


        // data string
        var dataString = 'name='+ name
                        + '&email=' + email        
                        + '&contact_no=' + contact_no
                        + '&comments=' + comments

        // ajax
        $.ajax({
            type:"POST",
            data: dataString,
            success: success()
        });
    });  


    // on success...
     function success(){
        $("#sent-form-msg").fadeIn();
        $("#contactForm").fadeOut();
     }

    return false;
});

Posted by: Guest on October-04-2020

Source

Code answers related to "mysqli real escape string php"

Code answers related to "PHP"

PHP Answers by Framework

Browse Popular Code Answers by Language

Answers for "mysqli real escape string php"

Code answers related to "mysqli real escape string php"

Code answers related to "PHP"

PHP Answers by Framework

Browse Popular Code Answers by Language

Popular Programming Languages

Advertisements

Company

Compilers

Help

Connect with us