Grep Again (was: MySQL UPDATE)
This WebDNA talk-list message is from 2007
It keeps the original formatting.
numero = 68870
interpreted = N
texte = Thanks Marc. To clarify, I'm trying to replicate the mysql_real_escape_string() function from PHP5. I have the following grep statement, but it won't put the backslash in front of the pattern. This: [grep search=[\'"]&replace=\\1]\'"[/grep] Should return this: \\\'\" But, I'm getting this: \\\ Ideas? On 4/24/07 5:15 PM, "Marc Thompson"
wrote: > Clint, > As a rule, before writing any user entered data into a database, I > cleanse it. Here's an example: > [replace db=mydb.db&eqSKUdatarq=[cart]][formvariables > name=_&exact=F][getchars start=2][name][/getchars]=[Grep > search=[^,-.%@_A-Za-z0-9 > ]&replace=][url][value][/url][/Grep]&[/formvariables][/replace] > > Here's what I use to clean up form variables passed to a page: > [formvariables] > [text][name]=[Grep search=[^,-.%@_A-Za-z0-9 > ]&replace=][value][/Grep][/text] > [/formvariables] > > Notice the line wrap immediately following the 0-9. That is a space. > > HTH, > Marc > > Clint Davis wrote: > >> I need to use WebDNA to update a MySQL table. Does anyone have some words of >> advice (or code preferably) to "cleanse" the user input before executing the >> SQL UPDATE statement? ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Thanks Marc. To clarify, I'm trying to replicate the mysql_real_escape_string() function from PHP5. I have the following grep statement, but it won't put the backslash in front of the pattern. This: [grep search=[\'"]&replace=\\1]\'"[/grep] Should return this: \\\'\" But, I'm getting this: \\\ Ideas? On 4/24/07 5:15 PM, "Marc Thompson" wrote: > Clint, > As a rule, before writing any user entered data into a database, I > cleanse it. Here's an example: > [replace db=mydb.db&eqSKUdatarq=[cart]][formvariables > name=_&exact=F][getchars start=2][name][/getchars]=[Grep > search=[^,-.%@_A-Za-z0-9 > ]&replace=][url][value][/url][/Grep]&[/formvariables][/replace] > > Here's what I use to clean up form variables passed to a page: > [formvariables] > [text][name]=[Grep search=[^,-.%@_A-Za-z0-9 > ]&replace=][value][/Grep][/text] > [/formvariables] > > Notice the line wrap immediately following the 0-9. That is a space. > > HTH, > Marc > > Clint Davis wrote: > >> I need to use WebDNA to update a MySQL table. Does anyone have some words of >> advice (or code preferably) to "cleanse" the user input before executing the >> SQL UPDATE statement? ------------------------------------------------------------- This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Clint Davis
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
RE: Server Traffic Simulation (1998)
[math] with first letter in field? (1997)
.db-tmp (2000)
Another bug -- in the docs ... (2002)
Searching multiple criteria (2000)
Requiring that certain fields be completed (1997)
RE: Symantec VIsual Page 1.0.3 (1997)
Multiple fields on 1 input (1997)
Triggers (2003)
OT: advice on Wintel server options (1998)
[BULK] [WebDNA] [BULK] 7.x and 6.x on same server (2012)
Three new problems, maybe a fourth (1997)
Using Cookie for client specific info? (1997)
Pop-up menu (1998)
MacFinder -- a new WebDNA web site (1998)
Anyone integrate askimet with webdna? (2007)
[BULK] [WebDNA] Happy St. Patricks Day WEBDNA (2018)
[format xs] freeze (1997)
Further tests with the infamous shipCost (1997)
Need hosting service (2000)