Is there PHP mysql_real_escape_string for postgresql?

Question

Is there PHP mysql_real_escape_string for postgresql? if yes then how ? please Give the Examples? & also the work of this string

Answer 1

Alternatively you could use prepared statements (pg_prepare) and placeholders ($1, $2, etc), and then give the arguments for the query in pg_execute. This would be my preferred way as it's not only cleaner, but also safer in the long run since there's no chance for SQL injections if you always use placeholders in prepared statements.

Answer 2

Use pg_query_params():

<?php    
$result = pg_query_params(
      $dbconn, // database connection
      'SELECT * FROM foo WHERE bar = $1 AND baz = $2', // query using placeholders
      array('value 1','value 2') // all values for the placeholders in a single array
    );
?>

Save and very eary to use.

Answer 3

See pg_escape_string at http://www.php.net/manual/en/function.pg-escape-string.php.

Answer 4

You have both pg_escape_string and pg_escape_bytea available.