First JSON encode it then escape it prior to inserting in the database.
Prior to doing an INSERT, do you MySQL real escape data before JSON encoding it, or after JSON encoding? [duplicate]
-
04-04-2022 - |
Domanda
Before inserting JSON-encoded data in MySQL, do you first JSON encode the data and then escape it prior to inserting, or do you first escape the data before JSON encoding it and then insert it?
Soluzione
Altri suggerimenti
Don't use mysql_real_escape_string - it's deprecated. http://php.net/manual/en/function.mysql-real-escape-string.php If you use one of the DB libraries such as PDO, then that will do the work for you. See real escape string and PDO
The very statement of question is wrong.
- Do not store JSON in database.
- real escape doesn't make your data safe, as it's implied in your question.
- mysql-real-escape-string belongs to mysql - so, the answer is quite obvious.
Autorizzato sotto: CC-BY-SA insieme a attribuzione
Non affiliato a StackOverflow