How to use mysql_real_escape_string for an array?

Question

I want to INSERT a set of data submitted by $_POST (in form of array) as

foreach($_POST['data'] as $single) {
$set[]="('static', '$single')";
}
$sets=implode(", ", $set);
mysql_query("INSERT INTO table (Static, Data) VALUES $sets");

Where is the best place to use use mysql_real_escape_string to avoid SQL injection, as the data are submitted by users.

Martin. · Accepted Answer · 2012-02-29 06:08:34Z

10

Before going to your first foreach.

$_POST['data'] = array_map("mysql_real_escape_string", $_POST['data']);

answered Feb 29, 2012 at 6:08

Martin.

10.5k3 gold badges45 silver badges69 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Frederick Marcoux · Accepted Answer · 2012-02-29 06:13:29Z

-1

Try with this:

foreach($_POST['data'] as $single)
{
    $set[]="('static', mysql_real_escape_string($single))";
}
$sets = implode(", ", $set);
mysql_query("INSERT INTO `table` (`Static`, `Data`) VALUES ".$sets."");

answered Feb 29, 2012 at 6:13

Frederick Marcoux

2,2091 gold badge30 silver badges58 bronze badges

Collectives™ on Stack Overflow

How to use mysql_real_escape_string for an array?

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related