Postgres escape special characters PHP

Question

I want to insert this inside my table in Postgres but I don't know how to escape the special characters. Also, my string is much longer than the one below but contains many such instances.

'<a href='http:\/\/%%code%%' target='_blank'>'

i think you need to change your datatype of your filed, now you need to add text as datatype instead of your right now datatype, so you can store html directly on database filed.. — Ravi Kavaiya
– Ravi Kavaiya, Commented Apr 28, 2016 at 4:11
Are you using prepared statements? If so you don't need to do anything special. If not, use prepared statements. — tadman
– tadman, Commented Apr 28, 2016 at 4:11

Harry · Accepted Answer · 2016-04-28 04:20:19Z

2

Please use pg_query_params in any data going into a Postgresql database or a similar method that escapes the string correctly. Do not under any circumstances trust any encoding coming from a client ie a Browser.

answered Apr 28, 2016 at 4:20

Harry

11.7k1 gold badge31 silver badges47 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Postgres escape special characters PHP

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related