- Safely escape user input with mysql_real_escape_string

- fixed some memory leaks
This commit is contained in:
Geir Hauge
2012-12-03 12:20:20 +00:00
parent 59e7d4782e
commit dc6b93166b
4 changed files with 79 additions and 72 deletions

View File

@@ -23,12 +23,6 @@
const char dbname_validchars[] =
"abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-";
/* same as strcpy, but returns a pointer to the end of dest instead of start */
char *strmov(char *dest, const char *src) {
while ((*dest++ = *src++))
;
return dest-1;
}
/* Returns true if dbname contains only characters in dbname_validchars. */
int dbname_isclean(char* dbname) {