About escape_sql

[lakasmonk]

how to use escape_sql

the flux donation redeemer uses escape_sql command script

i dont know how to fix the bug?

if you want i can post ss

[plankt]

'escape_sql()' is used on string variables, like '@password$', you want to use within the 'query_sql()' command

Whenever you let the user provide information that will be used in the database, you should escape it.

What it does: It makes sure the input is safe from injections, more info on wikipedia

Example:

The user inputs: Injecting code "+DELETE...+"
escape_sql("Injecting code "+DELETE...+"");
And it will become: Injecting code "+DELETE...+"

And if you have a bug, you should provide more information regarding the bug.