如何在C中清理SQL查询? [英] How to sanitize SQL queries in C?

问题描述

可能重复:
在C语言中防止SQL注入

Possible Duplicate:
Preventing SQL Injection in C

我知道PHP有一些内置函数可以帮助清理查询，但是C是否有类似的东西?

I know PHP has some built in functions that help to sanitize queries, but does C have anything like that?

snprintf(&buff[0],1023,"UPDATE grades SET grade='%c' WHERE username='%s'",choice,&uname[0]);

if (mysql_query(connect,&buff[0]) != 0) {
  // If it failed, tell the user
  printf("Error: %s!\n", mysql_error(connect));
  return;
}

推荐答案

MySQL C API 具有 mysql_real_escape_string() 函数.

The MySQL C API has a mysql_real_escape_string() function.

这篇关于如何在C中清理SQL查询?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！