PHP mysql_real_escape_string() returning `NULL`

Question

I'm using PHP Version 5.1.6 and trying to escape a query string from my $_GET array. However my script is returning a NULL after it's escaped.

It seems that mysql_escape_string() works fine, but it's deprecated, so I don't want to use it.

Having checked over the phpinfo() the MySQL lib is all loaded fine from what I can see. Has anyone experienced this kind of thing before?

$term = $_GET['q'];

var_dump($term); // string(7) "richard" 
echo "<br />";

$sterm = mysql_real_escape_string($term, $db);

var_dump($sterm); // NULL

It's very strange to me, I can't imagine why this function wouldn't work.

Alix Axel · Accepted Answer · 2010-05-18 11:17:58Z

11

Are you sure you have a MySQL connection running? That is a requirement for mysql_real_escape_string() to work:

Note: A MySQL connection is required before using mysql_real_escape_string() otherwise an error of level E_WARNING is generated, and FALSE is returned. If $link_identifier isn't defined, the last MySQL connection is used.

edited May 18, 2010 at 11:17

Alix Axel

155k99 gold badges406 silver badges508 bronze badges

answered May 18, 2010 at 10:54

Pekka

451k150 gold badges989 silver badges1.1k bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

David Yell Over a year ago

Wouldn't that mean that var_dump() would return FALSE rather than NULL ? I'm also following it with a MySQL query, which is running okay on the same var $db

David Yell Over a year ago

Turns out there is a bug in the MySQL class in this project! It only connects when you run a query, so I've had to force a connection and pass that into the function.

Collectives™ on Stack Overflow

PHP mysql_real_escape_string() returning `NULL`

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related