Differences

This shows you the differences between two versions of the page.

--- reference:qstr [2015/07/19 06:59] – [Usage] mnewnham
+++ v5:reference:qstr [2016/01/13 02:31] – ↷ Page moved from reference:qstr to v5:reference:qstr mnewnham
@@ Line 2: / Line 2: @@
 ~~NOTOC~~
 <WRAP right box>
+== See Also ==
+[[reference:addQ()]]\\
 == Syntax ==
   string qStr(
-         string $unquoted
+         string $unquoted,
+         optional bool $dontFixQuotes=false
          )
 </WRAP>
 ==== Description ====
-The function ''qStr()'' takes an input string, and allows it to be appropriately quoted to a database-specific standard. If the string itself contains quotes, they are escaped in the correct way. The field can then be used, for example in an SQL statement.
+The function ''qStr()'' takes an input string, and allows it to be:
+  - Wrapped in single quotes.The value can then be used, for example in an SQL statement.
+  - Have quotes inside the string escaped in a way that is appropriate for the database. This is done wherever possible using PHP driver functions e.g. [[http://php.net/manual/en/mysqli.real-escape-string.php|MySQL real_escape_string]]. The second parameter, ''$dontFixQuotes'' stops any internal quoting happening, This parameter was mostly used in older versions of PHP when the now removed ''magic_quotes'' parameter was enabled, and the 2 methods were in conflict.
 ------------------------------
@@ Line 37: / Line 43: @@
  */
 </code>