Question

‘I am using flash as3, php and mysql’

What is the difference between:

$username =      $_POST['username']; $password = md5( $_POST['password']); 

and

$username = mysql_real_escape_string(     $_POST['username']); $password = mysql_real_escape_string(md5( $_POST['password'])); 

I am sending and retrieving variables from flash AS3 to php and back to AS3 again. The former one (without mysql_real_escape_string) works fine. But the later one gets an error in flash. The error message is: ‘Parameter text must be non-null.’

I tried ‘echo’ (display) both result, the results are the same. Very strange.. Anyone have any idea?

Answer 1

Remember that mysql_real_escape_string() needs an open database connection to work properly; if you’re calling it before using mysql_connect, it won’t have the desired effect.