Question

@@SESSION.sql_mode;
@@GLOBAL.sql_mode;

both come up blank, the my.cnf shows no “NO_BACKSLASH_ESCAPE” flag and this is a section of a query which runs on my local server but not on my main.

UPDATE `table` 
SET `data` = "[{\"_talent\'s\"etc"

Now I know I can use “[{“”_talents””etc” but I’d rather not since it is much easier for me to keep to my current escaping security methods which have always worked before.

The charset is UTF-8 of the table I’m updating. The strangest thing is that it works on insert but not update!

This one really has me scratching. Any ideas?

Cheers

edit:

I’ve found out that the server is trying to interpret the query like so:

Failed to execute SQL : SQL UPDATE `build` SET `data` = "[{\"_talent\'s" WHERE `build_id` = 1 AND `userId` = 1128; failed : You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'UPDATE `build` SET `data` = "[{\\"_talent\\'s" WHERE `build_id` = 1 AND `userId`' at line 1

Yet surely it should be the same, why is the SQL engine escaping my escapes!? (if I leave out the escapes the query still fails)

Answer 1

I found out it seems to have been my version of webmin adding it in on the console… d’oh

When I ran the query from PHP it went through perfectly.

Many thanks though.