Is there PHP mysql_real_escape_string for postgresql?

Question

Is there PHP mysql_real_escape_string for postgresql? if yes then how ? please Give the Examples? & also the work of this string

Answer 1

请参阅http://www.php.net/manual/en/function.pg-escape-string.php 上的pg_escape_string 。

Answer 2

Alternatively you could use prepared statements ( pg_prepare ) and placeholders ( $1 , $2 , etc), and then give the arguments for the query in pg_execute . This would be my preferred way as it's not only cleaner, but also safer in the long run since there's no chance for SQL injections if you always use placeholders in prepared statements.

Answer 3

Use pg_query_params() :

<?php    
$result = pg_query_params(
      $dbconn, // database connection
      'SELECT * FROM foo WHERE bar = $1 AND baz = $2', // query using placeholders
      array('value 1','value 2') // all values for the placeholders in a single array
    );
?>

Save and very eary to use.

Answer 4

你有pg_escape_string和pg_escape_bytea可用。

Answer 5

PG转义文字可以提供类似的功能： https : //www.php.net/manual/zh/function.pg-escape-literal.php