First JSON encode it then escape it prior to inserting in the database.
Prior to doing an INSERT, do you MySQL real escape data before JSON encoding it, or after JSON encoding? [duplicate]
-
04-04-2022 - |
Question
Before inserting JSON-encoded data in MySQL, do you first JSON encode the data and then escape it prior to inserting, or do you first escape the data before JSON encoding it and then insert it?
Solution
OTHER TIPS
Don't use mysql_real_escape_string - it's deprecated. http://php.net/manual/en/function.mysql-real-escape-string.php If you use one of the DB libraries such as PDO, then that will do the work for you. See real escape string and PDO
The very statement of question is wrong.
- Do not store JSON in database.
- real escape doesn't make your data safe, as it's implied in your question.
- mysql-real-escape-string belongs to mysql - so, the answer is quite obvious.
Licensed under: CC-BY-SA with attribution
Not affiliated with StackOverflow