PHP mysqli_real_escape_string() 函數

轉義字串中的特殊字元：

 <?php // 假設資料庫使用者名稱：root，密碼：123456，資料庫：CODERCTO $con=mysqli_connect("localhost","root","123456","CODERCTO"); if (mysqli_connect_errno($con)) { echo "連線MySQL 失敗: " . mysqli_connect_error(); } mysqli_query($con,"CREATE TABLE websites2 LIKE websites");$newname="菜鳥'教程";// 沒有轉義$newname 中特殊字符，執行失敗mysqli_query($con,"INSERT into websites2 (name) VALUES (mysqli_query($con,"INSERT into websites2 (name) VALUES (mysqli_query($con,"INSERT into websites2 (name) VALUES (mysqli_query($con) '$newname')");//轉義特殊字元$newpers=mysqli_real_escape_string($con,$newname);// 轉義後插入，執行成功mysqli_query($con,"INSERT into websites2 (name) VALUES ('$newname')");mysqli_close($ites2 (name) VALUES ('$newname')");mysqli_close($ites2 ($ con);?>

定義和用法

mysqli_real_escape_string() 函數轉義在SQL 語句中使用的字串中的特殊字元。

文法

mysqli_real_escape_string( connection,escapestring ) ;

技術細節