Does mysql_real_escape_string prevent sql injection?



Does mysql_real_escape_string prevent sql injection?..

Answer / Amod Kumar Singh

While mysql_real_escape_string helps to escape special characters in a string that could otherwise break a SQL query, it does not completely prevent SQL injection. Other security measures should also be implemented to protect against SQL injection attacks.

Is This Answer Correct ?    0 Yes 0 No

Post New Answer

More SQL PLSQL Interview Questions

There is a table, In one column it has implemented a index, but the index is disturbed by the regular dml statements.. but still we need to keep the index. how it is possible?

1 Answers   Cognizant,


why should required for Indexed by table in pl/sql

3 Answers  


What can I use instead of union in sql?

1 Answers  


How does one load ebcdic data? : aql loader

1 Answers  


What is the result, when NULL is compared with NULL?

22 Answers   TCS,


What is query syntax?

1 Answers  


What is scope and visibility in PL/SQL?

1 Answers  


What is sql in oracle?

1 Answers  


describe mysql connection using mysql binary. : Sql dba

1 Answers  


Why do we need view in sql?

1 Answers  


overloading of stored procedure is possible in oracle?

3 Answers   Nelco,


What is mutating error in pl sql?

1 Answers  


Categories