0

I am trying to insert email headers read from impap in to a mysql text field. Problem is the headers are full of slashes, commas, quotes, line feeds. mysql_escape doesnt come near it. The different mail server responses can lead to quite different headers. Do i have to do some weird voodoo before storage?

2 Answers2

1

mysql_real_escape_string() should really be all you need:

mysql_real_escape_string() calls MySQL's library function mysql_real_escape_string, which prepends backslashes to the following characters: \x00, \n, \r, \, ', " and \x1a.

are you working with multiple connections? If you are, be sure to add $link_identifier to the call, as defined in the manual.

Pekka
  • 442,112
  • 142
  • 972
  • 1,088
  • I am a pillock - mysqlescape string does work just fine. Late nights and commas got me fuzzcooed. –  Feb 06 '10 at 00:27
0

Use prepared statements instead of building the query using strings.

See for example here.

Community
  • 1
  • 1
Mark Byers
  • 811,555
  • 193
  • 1,581
  • 1,452