php – mysql_real_escape_string和addslash有什么区别？

mysql_real_escape_string和addslash都用于在数据库查询之前转义数据,所以有什么区别？ (这个问题不是关于参数化查询/ PDO / MysqLi)

string MysqL_real_escape_string ( string $unescaped_string [,resource $link_identifier ] )
MysqL_real_escape_string() calls MySQL‘s library function MysqL_real_escape_string,which prepends backslashes to the following characters: \x00,\n,\r,\,‘,” and \x1a.

string addslashes ( string $str )
Returns a string with backslashes before characters that need to be quoted in database queries etc. These characters are single quote (‘),double quote (“),backslash (\) and NUL (the NULL byte).

它们影响不同的角色. MysqL_real_escape_string是特定于MysqL的. Addslashes只是一个通用的功能,可能适用于其他的东西以及MysqL.

原文地址：https://www.jb51.cc/php/131919.html