我可以安全地将哪些字符插入SQL数据库而不进行转义？

Question

I've had a look on Google to try and find out which characters are safe to insert into a MySQL database, but every time someone just seems to say "it's fine as long as you use *_real_escape_string

I'm trying to find out which different special characters I can use to generate a salt, so escaping characters will be no good since the salt column is limited to char(10)

The salt is automatically generated. Am I correct in thinking anything except the following characters are okay?

• '
• "
• \\

Answer 1

You should never ask such a question actually.

You must always use prepared statements/placeholders and not care of the actual characters.