在进行INSERT之前，在JSON编码之前，还是在JSON编码之后，你是MySQL真正的转义数据吗？

Question

在MySQL中插入JSON编码数据之前，您首先对数据进行JSON编码，然后在插入之前将其转义，或者在JSON编码之前首先转义数据然后插入数据吗？

Answer 1

首先对JSON进行编码，然后在插入数据库之前对其进行转义。

Answer 2

Don't use mysql_real_escape_string - it's deprecated. http://php.net/manual/en/function.mysql-real-escape-string.php If you use one of the DB libraries such as PDO, then that will do the work for you. See real escape string and PDO

Answer 3

The very statement of question is wrong.

1. Do not store JSON in database.
2. real escape doesn't make your data safe, as it's implied in your question.
3. mysql-real-escape-string belongs to mysql - so, the answer is quite obvious.