query: MySQLi and PHP allow special characters in form submission, but not SQL insert?
positive_passages.docid: 255
positive_passages.text: How can I prevent SQL injection in PHP?
negative_passages.docid: 92495
negative_passages.text: PHP PDO: charset, set names?
negative_passages.docid: 74406
negative_passages.text: SQL injection that gets around mysql_real_escape_string()
negative_passages.docid: 117946
negative_passages.text: How to change MySQL table names in Linux server to be case insensitive?
negative_passages.docid: 95600
negative_passages.text: Call to a member function bind_param() on a non-object MySQLi
negative_passages.docid: 94931
negative_passages.text: Mysql_real_escape_string() Warning Confusion
negative_passages.docid: 109617
negative_passages.text: Python MySQLdb string substitution without added quotations
negative_passages.docid: 82690
negative_passages.text: PHP replacing special characters like à->a, è->e
negative_passages.docid: 148980
negative_passages.text: php substr() function with utf-8 leaves � marks at the end
negative_passages.docid: 149657
negative_passages.text: Alternative to mysql_real_escape_string without connecting to DB
negative_passages.docid: 60166
negative_passages.text: exporting a table in MySQL with columns that have newline characters
negative_passages.docid: 9791
negative_passages.text: Incorrect Integer (2147483647) is inserted into MySQL?
negative_passages.docid: 130179
negative_passages.text: Incorrect string value: '\xF0\x9F\x8E\xB6\xF0\x9F...' MySQL
negative_passages.docid: 36792
negative_passages.text: How to escape strings in SQL Server using PHP?
negative_passages.docid: 30320
negative_passages.text: Is mysqli extension enabled in this php configuration?
negative_passages.docid: 121737
negative_passages.text: Allow user submitted HTML in PHP
negative_passages.docid: 16324
negative_passages.text: How does a PreparedStatement avoid or prevent SQL injection?