MySQL Forums
Forum List  »  Performance

Re: 2 small queries vs 1 big
Posted by: Roman Ivanov
Date: August 30, 2005 05:50PM

#> I'm usually coding in PHP, so I always quote my
#> values to prevent possible sql injection attacks.
#> Does quoting numbers have some negative effect?
#
#Could have. At the very least, an implicit conversion has to be done.

I'm not sure what do you mean by that. Aren't all numbers converted to binary format anyway?

#BTW, you should realise that quoting alone is not really a protection.

Oh, I use mysql_real_escape_string, but without quotes that does not save from SQL injection.

Unfortunately, I can't use new DBO extension yet, because my scripts sometimes run on servers where it's not installed (mySQL 4.0, PHP4).

Options: ReplyQuote


Subject
Views
Written By
Posted
2353
August 27, 2005 12:46PM
1624
August 28, 2005 02:42AM
1439
August 28, 2005 12:34PM
1655
August 28, 2005 01:58PM
1412
August 30, 2005 08:15AM
1439
August 30, 2005 08:27AM
Re: 2 small queries vs 1 big
1499
August 30, 2005 05:50PM
1484
August 31, 2005 03:20AM
1577
September 07, 2005 11:56AM
1741
September 07, 2005 01:43PM


Sorry, you can't reply to this topic. It has been closed.

Content reproduced on this site is the property of the respective copyright holders. It is not reviewed in advance by Oracle and does not necessarily represent the opinion of Oracle or any other party.