Grep Again (was: MySQL UPDATE)
This WebDNA talk-list message is from 2007
It keeps the original formatting.
numero = 68870
interpreted = N
texte = Thanks Marc. To clarify, I'm trying to replicate themysql_real_escape_string() function from PHP5. I have the following grepstatement, but it won't put the backslash in front of the pattern.This: [grep search=[\'"]&replace=\\1]\'"[/grep]Should return this: \\\'\"But, I'm getting this: \\\Ideas?On 4/24/07 5:15 PM, "Marc Thompson"
wrote:> Clint,> As a rule, before writing any user entered data into a database, I> cleanse it. Here's an example:> [replace db=mydb.db&eqSKUdatarq=[cart]][formvariables> name=_&exact=F][getchars start=2][name][/getchars]=[Grep> search=[^,-.%@_A-Za-z0-9> ]&replace=][url][value][/url][/Grep]&[/formvariables][/replace]> > Here's what I use to clean up form variables passed to a page:> [formvariables]> [text][name]=[Grep search=[^,-.%@_A-Za-z0-9> ]&replace=][value][/Grep][/text]> [/formvariables]> > Notice the line wrap immediately following the 0-9. That is a space.> > HTH,> Marc> > Clint Davis wrote:> >> I need to use WebDNA to update a MySQL table. Does anyone have some words of>> advice (or code preferably) to "cleanse" the user input before executing the>> SQL UPDATE statement?-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Associated Messages, from the most recent to the oldest:
Thanks Marc. To clarify, I'm trying to replicate themysql_real_escape_string() function from PHP5. I have the following grepstatement, but it won't put the backslash in front of the pattern.This: [grep search=[\'"]&replace=\\1]\'"[/grep]Should return this: \\\'\"But, I'm getting this: \\\Ideas?On 4/24/07 5:15 PM, "Marc Thompson" wrote:> Clint,> As a rule, before writing any user entered data into a database, I> cleanse it. Here's an example:> [replace db=mydb.db&eqSKUdatarq=[cart]][formvariables> name=_&exact=F][getchars start=2][name][/getchars]=[Grep> search=[^,-.%@_A-Za-z0-9> ]&replace=][url][value][/url][/Grep]&[/formvariables][/replace]> > Here's what I use to clean up form variables passed to a page:> [formvariables]> [text][name]=[Grep search=[^,-.%@_A-Za-z0-9> ]&replace=][value][/Grep][/text]> [/formvariables]> > Notice the line wrap immediately following the 0-9. That is a space.> > HTH,> Marc> > Clint Davis wrote:> >> I need to use WebDNA to update a MySQL table. Does anyone have some words of>> advice (or code preferably) to "cleanse" the user input before executing the>> SQL UPDATE statement?-------------------------------------------------------------This message is sent to you because you are subscribed to the mailing list .To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to Web Archive of this list is at: http://webdna.smithmicro.com/
Clint Davis
DOWNLOAD WEBDNA NOW!
Top Articles:
Talk List
The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...
Related Readings:
[WebDNA] screen size (2011)
authorize.net SIM & AIM Sample Code (2002)
emailer w/F2 (1997)
Extended [ConvertChars] (1997)
Date Formats (1997)
WebCat chatroom (1997)
emailer (1997)
[WebDNA] Retrieving a PDF from an email (2008)
off-topic - printinglib 68K (1997)
[append] (1998)
[WebDNA] Funding for a new v7+ commerce system? (2011)
Can you do this??? and other stuff (1997)
Chown www:wheel Almost There WebCat 5 on itools 7 (2003)
[WebDNA] Styling search results [using css] (2009)
Re(2): Append command (1999)
UPDATE PROBLEM (1997)
[isfile] ? (1997)
Download (1999)
[OT] Kerio Mailserver (2003)
Webstar SSL and Non-SSL question (1998)