简体   繁体   English

MySQL是否具有内置的转义功能?

[英]Does MySQL have built-in escaping functionality?

I am now using my 100th (ok, exaggerated) language&framework combination with MySQL. 我现在将我的第100种(好的,夸张的)语言和框架与MySQL结合使用。 It seems almost silly, and also very risky, to me that every single one of these tools provides their own escaping functionality. 在我看来,这些工具中的每一个都提供自己的转义功能,这几乎是愚蠢的,也是非常冒险的。 Does MySQL (or other SQL solutions) not offer that themselves? MySQL(或其他SQL解决方案)是否不自己提供? What if there is a little bug in one such customized escape functions? 如果其中一个自定义的转义功能中存在小错误,该怎么办? Why should we have to trust third party providers to get it right? 为什么我们必须信任第三方提供商才能做到这一点?

MySQL 具有连接器和API,包括mysql_real_escape_string功能,而编程语言正在对其进行调整。

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM