Curse you for being faster

JeevesBond — Fri, 12 Sep 2008 20:15:00 +0000

Curse you for being faster than me pr0gr4mm3r, you said exactly what I was going to.

Personally I love how Drupal does data sanitation, in a printf style. For example, to get Andy's user account we might run:

<?php
$result = db_query("SELECT * FROM users WHERE username='%s' AND number_of_posts > %d", "andy206uk", 1000);
?>

Sanitation is part of the db_query() function, so you never have to worry about it. I advise you to borrow from this and create your own similar functions.

Another note, it also works

greg — Fri, 12 Sep 2008 16:03:26 +0000

Another note, it also works for numeric strings as well

<?php
$var = 2; //is_numeric() returns true
$var = "2"; //is_numeric() returns true
?>

Wow - quick response! I'm

andy206uk — Fri, 12 Sep 2008 15:05:27 +0000

Wow - quick response!

I'm not familiar with type casting in PHP, but I'm definitely going to read up on it now!

Thanks!

Yup, I will often type cast

pr0gr4mm3r — Fri, 12 Sep 2008 14:58:15 +0000

Yup, I will often type cast it to an integer instead of escaping it if I know it should be a number. Don't know if that saves CPU time or not, but it further cleans that piece of data.

<?php
$some_number = (int)$some_number;
?>