blocks|key|76851|text|更新正如在comment中提到的，mysql_已被deprecated+since+5.5|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|CODE|entityRanges|data|76852|76853|从PHP5.5开始就不推荐使用mysql扩展。应该使用mysqli或PDO扩展名。在mysql_deprecation中已经决定了弃用，在那里可以找到这个决定背后的原因的讨论。|blockquote|76854|76855|76856|在PHP7中删除了。|76857|76858|mysql_real_escape_string()是MySQL+function+"batch"的标准部分，如果扩展被正确加载，它应该始终正常工作。|76859|还有没有其他mysql_函数可以使用？(它不应该)|76860|确保您的php.ini中没有注释此行|76861|extension=mysql.so|code-block|syntax|javascript|76862|另外，明智的做法是使用mysqli或PDO+(mysql_+is+deprecated)，它们都可以为您解决转义问题。|76863|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/13856639/mysql-real-escape-string-is-undefined/13856694?noredirect=1#comment58761215_13856694|1|https://wiki.php.net/rfc/remove_deprecated_functionality_in_php7#extmysql|2|https://wiki.php.net/rfc/mysql_deprecation|3|http://php.net/manual/en/ref.mysql.php|4|http://php.net/manual/en/book.mysqli.php|5|http://php.net/manual/en/book.pdo.php|6|http://news.php.net/php.internals/53799^0|0|2|H|6|5|7|0|P|K|1|0|0|16|H|2|0|0|0|9|1|0|0|0|23|0|Q|R|M|3|0|0|P|6|6|0|0|I|4|7|0|0|0|1N|B|6|I|3|N|6|B|6|4|I|3|5|N|K|6|0^^$0|@$1|2|3|4|5|6|7|1M|8|@$9|1N|A|1O|B|C]|$9|1P|A|1Q|B|D]]|E|@$9|1R|A|1S|1|1T]|$9|1U|A|1V|1|1W]]|F|$]]|$1|G|3|-4|5|6|7|1X|8|@]|E|@]|F|$]]|$1|H|3|I|5|J|7|1Y|8|@]|E|@$9|1Z|A|20|1|21]]|F|$]]|$1|K|3|-4|5|6|7|22|8|@]|E|@]|F|$]]|$1|L|3|-4|5|6|7|23|8|@]|E|@]|F|$]]|$1|M|3|N|5|6|7|24|8|@$9|25|A|26|B|C]]|E|@]|F|$]]|$1|O|3|-4|5|6|7|27|8|@]|E|@]|F|$]]|$1|P|3|Q|5|6|7|28|8|@$9|29|A|2A|B|C]|$9|2B|A|2C|B|D]]|E|@$9|2D|A|2E|1|2F]]|F|$]]|$1|R|3|S|5|6|7|2G|8|@$9|2H|A|2I|B|C]|$9|2J|A|2K|B|D]]|E|@]|F|$]]|$1|T|3|U|5|6|7|2L|8|@$9|2M|A|2N|B|C]|$9|2O|A|2P|B|D]]|E|@]|F|$]]|$1|V|3|W|5|X|7|2Q|8|@]|E|@]|F|$Y|Z]]|$1|10|3|11|5|6|7|2R|8|@$9|2S|A|2T|B|C]|$9|2U|A|2V|B|D]|$9|2W|A|2X|B|D]|$9|2Y|A|2Z|B|D]]|E|@$9|30|A|31|1|32]|$9|33|A|34|1|35]|$9|36|A|37|1|38]]|F|$]]|$1|12|3|-4|5|6|7|39|8|@]|E|@]|F|$]]]|13|$14|$5|15|16|17|F|$18|19]]|1A|$5|15|16|17|F|$18|1B]]|1C|$5|15|16|17|F|$18|1D]]|1E|$5|15|16|17|F|$18|1F]]|1G|$5|15|16|17|F|$18|1H]]|1I|$5|15|16|17|F|$18|1J]]|1K|$5|15|16|17|F|$18|1L]]]]

Update as mentioned in <a href="https://stackoverflow.com/questions/13856639/mysql-real-escape-string-is-undefined/13856694?noredirect=1#comment58761215_13856694">comment</a>, <code>mysql_</code> has been <a href="https://wiki.php.net/rfc/remove_deprecated_functionality_in_php7#extmysql" rel="noreferrer">deprecated since 5.5</a>:

<blockquote>
 The mysql extension has been deprecated since PHP 5.5. The mysqli or PDO extension should be used instead. The deprecation has been decided in <a href="https://wiki.php.net/rfc/mysql_deprecation" rel="noreferrer">mysql_deprecation</a>, where a discussion of the reasons behind this decision can be found.
</blockquote>

and removed in PHP 7.

<hr/>

<code>mysql_real_escape_string()</code> is standard part of <a href="http://php.net/manual/en/ref.mysql.php" rel="noreferrer">MySQL function "batch"</a> and should always work if the extension is loaded correctly.

Does any another <code>mysql_</code> function work? (It should not)

Make sure, that you have this line uncommented in your <code>php.ini</code>:

<pre><code>extension=mysql.so
</code></pre>

Also it'd be wise to use <a href="http://php.net/manual/en/book.mysqli.php" rel="noreferrer"><code>mysqli</code></a> or <a href="http://php.net/manual/en/book.pdo.php" rel="noreferrer"><code>PDO</code></a> instead (<a href="http://news.php.net/php.internals/53799" rel="noreferrer"><code>mysql_</code> is deprecated</a>), they both can take care of escaping for you.

blocks|key|76710|text|在我的例子中，我使用了mysqli_real_escape_string而不是mysql_real_escape_string。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|76711|entityMap^0|B|P|13|O|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

In my case I used <code>mysqli_real_escape_string</code> instead of <code>mysql_real_escape_string</code>.

blocks|key|3974590|text|有趣的是，在探索了这里的所有其他解决方案后，我意识到这个问题实际上是由于php5-mysql扩展还没有安装-它不是默认安装在新的Ubuntu上，也不是当你安装新的php时。因此，对我来说，解决方案是:安装php5-mysql扩展：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3974591|sudo+apt-get+install+php5-mysql|code-block|syntax|javascript|3974592|在此之后，我不再收到那些讨厌的mysql_*错误;-)|3974593|entityMap^0|10|A|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|S|8|@]|D|@]|E|$]]|$1|M|3|-4|5|6|7|T|8|@]|D|@]|E|$]]]|N|$]]

Interestingly, after exploring all the other solutions here, I realized the problem is actually due to the <code>php5-mysql</code> extension not having been installed yet - it's not installed by default on a fresh Ubuntu, neither when u install fresh php. So, for me the solution became: install the php5-mysql extension:

<pre><code>sudo apt-get install php5-mysql
</code></pre>

After this, I wasn't getting those nasty mysql_* errors again ;-)

blocks|key|76870|text|也许您的问题存在于php服务器配置(编译)中。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|76871|有关mysql_real_escape_string的更多信息，请访问：http://www.php.net/manual/en/function.mysql-real-escape-string.php|offset|length|76872|entityMap|0|LINK|mutability|MUTABLE|url|http://www.php.net/manual/en/function.mysql-real-escape-string.php^0|0|10|1U|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

Maybe your problem resides into the php server config (compiling).

Here more information about the mysql_real_escape_string:
<a href="http://www.php.net/manual/en/function.mysql-real-escape-string.php" rel="nofollow">http://www.php.net/manual/en/function.mysql-real-escape-string.php</a>

blocks|key|4456077|text|MySQL扩展从PHP5.5开始就被弃用了。因此，mysql_real_escape_string()在PHP7中不可用。这意味着用户输入不能被正确转义，并使代码容易受到SQL注入攻击。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4456078|官方解决方案是replace+ext/mysql+with+MySQLi,+PDO或其他受支持的数据库扩展。|offset|length|4456079|为了防止SQL注入攻击，建议在与数据库对话时使用prepared+statements+and+parameterized+queries。|4456080|entityMap|0|LINK|mutability|MUTABLE|url|https://wiki.php.net/rfc/remove_deprecated_functionality_in_php7|1|https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php^0|0|7|Y|0|0|O|19|1|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@]|9|@$D|T|E|U|1|V]]|A|$]]|$1|F|3|G|5|6|7|W|8|@]|9|@$D|X|E|Y|1|Z]]|A|$]]|$1|H|3|-4|5|6|7|10|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]|P|$5|K|L|M|A|$N|Q]]]]

MySQL extension is deprecated since PHP 5.5. mysql_real_escape_string() is therefore not available in PHP 7. This means that user input cannot be escaped correctly and leaves the code open to SQL injection attacks.

The PHP-official solution is to <a href="https://wiki.php.net/rfc/remove_deprecated_functionality_in_php7" rel="nofollow noreferrer">replace ext/mysql with MySQLi, PDO</a> or other supported database extension.

To prevent SQL injection attacks, it is recommended to use <a href="https://stackoverflow.com/questions/60174/how-can-i-prevent-sql-injection-in-php">prepared statements and parameterized queries</a> when talking to the database.

I am using PHP version 5.3 and trying to use <code>mysql_real_escape_string($unescaped_string)</code> in my code, but I get the error:

<pre><code>Fatal error: Call to undefined function mysql_real_escape_string() 
in /var/www/engine/database.php on line 38
</code></pre>

I can still connect to the database however. Why is it not available?

I am using PHP version 5.3.

mysql_real_escape_string is undefined

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

教程

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云智能顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

EdgeOne AI 安全实战专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

我正在使用PHP5.3版本，并试图在我的代码中使用mysql_real_escape_string($unescaped_string)，但是我得到了错误：Fatal error: Call to undefined function mysql_real_escape_string() in /var/www/engine/database.php on line 38不过，我仍然可以连接到数据

问mysql_real_escape_string未定义
EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问mysql_real_escape_string未定义EN

回答 5

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问mysql_real_escape_string未定义
EN