WordPress开发者和主题制作者的搜索引擎



esc_sql ›

Since2.8.0
已弃用n/a
esc_sql ( $data )
参数:
  • (string|array) $data Unescaped data
    Required: Yes
返回:
  • (string|array) Escaped data
定义在:
文档:

Escapes data for use in a MySQL query.

Usually you should prepare queries using wpdb::prepare(). Sometimes, spot-escaping is required or useful. One example is preparing an array for use in an IN clause.

NOTE: Since 4.8.3, '%' characters will be replaced with a placeholder string, this prevents certain SQLi attacks from taking place. This change in behaviour may cause issues for code that expects the return value of esc_sql() to be useable for other purposes.



Related Functions: esc_js, esc_url, esc_html, is_ssl, esc_html__

源码

function esc_sql( $data ) {
	global $wpdb;
	return $wpdb->_escape( $data );
}