Newsgroups: php.internals Path: news.php.net Xref: news.php.net php.internals:63182 Return-Path: Mailing-List: contact internals-help@lists.php.net; run by ezmlm Delivered-To: mailing list internals@lists.php.net Received: (qmail 92391 invoked from network); 20 Sep 2012 07:18:22 -0000 Received: from unknown (HELO lists.php.net) (127.0.0.1) by localhost with SMTP; 20 Sep 2012 07:18:22 -0000 Authentication-Results: pb1.pair.com header.from=smalyshev@sugarcrm.com; sender-id=pass Authentication-Results: pb1.pair.com smtp.mail=smalyshev@sugarcrm.com; spf=pass; sender-id=pass Received-SPF: pass (pb1.pair.com: domain sugarcrm.com designates 173.203.6.131 as permitted sender) X-PHP-List-Original-Sender: smalyshev@sugarcrm.com X-Host-Fingerprint: 173.203.6.131 smtp131.ord.emailsrvr.com Linux 2.6 Received: from [173.203.6.131] ([173.203.6.131:55507] helo=smtp131.ord.emailsrvr.com) by pb1.pair.com (ecelerity 2.1.1.9-wez r(12769M)) with ESMTP id 8F/0F-15057-C33CA505 for ; Thu, 20 Sep 2012 03:18:21 -0400 Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp29.relay.ord1a.emailsrvr.com (SMTP Server) with ESMTP id CB24810809C; Thu, 20 Sep 2012 03:18:17 -0400 (EDT) X-Virus-Scanned: OK Received: by smtp29.relay.ord1a.emailsrvr.com (Authenticated sender: smalyshev-AT-sugarcrm.com) with ESMTPSA id 1B59E108092; Thu, 20 Sep 2012 03:18:17 -0400 (EDT) Message-ID: <505AC338.8090804@sugarcrm.com> Date: Thu, 20 Sep 2012 00:18:16 -0700 Organization: SugarCRM User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6; rv:15.0) Gecko/20120907 Thunderbird/15.0.1 MIME-Version: 1.0 To: Lars Strojny CC: "internals@lists.php.net PHP internals" References: <177BEC05-2944-441A-98FE-7A456061C4EE@strojny.net> <79136631-A0BD-4662-9CFF-2397DB962835@strojny.net> In-Reply-To: <79136631-A0BD-4662-9CFF-2397DB962835@strojny.net> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit Subject: Re: [PHP-DEV] PR 186: external protocols and locale independent string conversion From: smalyshev@sugarcrm.com (Stas Malyshev) Hi! > Quick follow-up, PDO::quote() and mysqli::real_escape_string() suffer from the same issue. Why would you feed doubles to escape_sting functions? I don't think it's the right thing to do. -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227