> Kenn Humborg wrote:
> >>Moreover... I'm still not seeing a huge advantage in using automagic ADO
> >>parameters... at all really.
> >>Perhaps you could give some more examples ?
> > Maybe I want to allow strings in fields to contain "special"
> > chars like '"; without having to worry about quoting rules.
>> Uh huh.
>>http://phplens.com/lens/adodb/docs-adodb.htm>> I haven't used this ... so... I can't comment on whether it's
I'll take a look at some point.
> > See that line above with the single period? That's the marker for
> > end of body text in SMTP. Yet I can still include it in an email
> > and it gets through unmodified.
>> Uh huh, but, I strongly suspect your mail client did something
> did such that
>> Didn't terminate the SMTP session...
Yes - it sent it as CR LF . . CR LF.
> Thus if you could 'inject' CRLF.CRLF into your mail client's Data
> payload that *would* break the SMTP session
Yes. But my point is that my mail reader knows do to that. Similarly,
the data access layer should know about quoting rules, not the
application layer. Because they are different in different databases.
> Aside from the php ADO layer, which I can't and won't comment on since,
> I've no experience of it... solutions like the following
>>http://www.webmasterstop.com/63.html>> Don't seem to be a "Turning test" level difficulty in a non ADO world.
And that is MySQL-specific.
But the upshot of all this seems to be that best practice in PHP seems to be
manual insertion of arguments in SQL queries.
I personally don't think that's a good idea, but I don't write PHP
code for a living, so I'm not going to get into a long discussion
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!