<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>PHP Reference Book Blog &#187; sql injection</title>
	<atom:link href="http://www.phpreferencebook.com/tag/sql-injection/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.phpreferencebook.com</link>
	<description>PHP Reference: Beginner to Intermediate PHP5</description>
	<lastBuildDate>Wed, 25 Aug 2010 12:58:18 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=abc</generator>
		<item>
		<title>mysql_real_escape_string() vs addslashes()</title>
		<link>http://www.phpreferencebook.com/clarifications/mysql_real_escape_string-vs-addslashes/</link>
		<comments>http://www.phpreferencebook.com/clarifications/mysql_real_escape_string-vs-addslashes/#comments</comments>
		<pubDate>Wed, 30 Apr 2008 05:24:08 +0000</pubDate>
		<dc:creator>Mario Lurig</dc:creator>
				<category><![CDATA[Clarifications]]></category>
		<category><![CDATA[addslashes]]></category>
		<category><![CDATA[MySQL]]></category>
		<category><![CDATA[mysql_real_escape_string]]></category>
		<category><![CDATA[php]]></category>
		<category><![CDATA[php5]]></category>
		<category><![CDATA[security]]></category>
		<category><![CDATA[sql injection]]></category>

		<guid isPermaLink="false">http://www.phpreferencebook.com/?p=10</guid>
		<description><![CDATA[(pgs. 124-125) When describing the function mysql_real_escape_string(), the following note was included: Note: Performs the same functionality as addslashes(). While they are practically identical in their behavior, this is an oversimplification of the extra strength of mysql_real_escape_string(). At this point, I will pass on the following blog post that provides some extra insight into the [...]]]></description>
			<content:encoded><![CDATA[<h4>(pgs. 124-125)</h4>
<p>When describing the function <strong>mysql_real_escape_string()</strong>, the following note was included:</p>
<blockquote><p><em>Note: Performs the same functionality as <strong>addslashes()</strong>.</em></p></blockquote>
<p>While they are practically identical in their behavior, this is an oversimplification of the extra strength of <strong>mysql_real_escape_string()</strong>. At this point, I will pass on the following blog post that provides some extra insight into the comparison of the two variables:<a title="addslashes() Versus mysql_real_escape_string()" href="http://shiflett.org/blog/2006/jan/addslashes-versus-mysql-real-escape-string" target="_blank">addslashes() Versus mysql_real_escape_string()</a> by Chris Shiflett. I was not previously aware of this difference and security loophole.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.phpreferencebook.com/clarifications/mysql_real_escape_string-vs-addslashes/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
