MySQL Injection

[scienziato-pazzo]

Hi, I use the dbQuery instruction to use queries. But how to use the old mysql_real_escape_string to protect the query from MySQL Injection?

[MIKI785]

I don't know about that but try using string.gsub, it's the simplest solution, at least I think so.

[csiguusz]

Just read the wiki about dbQuery.

String parameters are automatically quoted and escaped as required.

[scienziato-pazzo]

Thanks csiguusz.

[csiguusz]

You are welcome.