mysql and serialized php objects?Q

[PeterF]

Hello,

following problem: I use a mysql query string like

$arg= " insert into ".$sometable;
$arg.=" (id, col1) ";
$arg.="values ( '$this->id', '$data' ) ";
^^^^^^
$data is a product of
serialize($some_object)

The serialization has many different symbols and I experience problems from
MySQL.
I have tried to use just another string or the base64-variant of my
serialized object and it works!

So, is there some more elegant way of saving objects as strings than
encoding them after serialization
as base64?

thanks
-- Peter

[Pedro Graca]

PeterF wrote:

following problem: I use a mysql query string like

$arg= " insert into ".$sometable;
$arg.=" (id, col1) ";
$arg.="values ( '$this->id', '$data' ) ";
^^^^^
$data is a product of serialize($some_object)

Well, addslashes() to it, or mysql_escape_string() it

$data = addslashes($data);

/* OR */

$data = mysql_escape_string($data);
before building the sql query string.
--
--= my mail box only accepts =--
--= Content-Type: text/plain =--
--= Size below 10001 bytes =--

[Jochen Daum]

Hi Peter,

On Tue, 9 Mar 2004 17:57:18 +0100, "PeterF"
<NO*************@pf-webservices.de> wrote:

Hello,

following problem: I use a mysql query string like

$arg= " insert into ".$sometable;
$arg.=" (id, col1) ";
$arg.="values ( '$this->id', '$data' ) ";
^^^^^^
$data is a product of
serialize($some_object)
Try using mysql_escape_string() on the insert only. Also check out
get_magic_quotes_runtime() and stripslashes()

HTH, Jochen

The serialization has many different symbols and I experience problems from
MySQL.
I have tried to use just another string or the base64-variant of my
serialized object and it works!

So, is there some more elegant way of saving objects as strings than
encoding them after serialization
as base64?

thanks
-- Peter

--
Jochen Daum - Cabletalk Group Ltd.
PHP DB Edit Toolkit -- PHP scripts for building
database editing interfaces.
http://sourceforge.net/projects/phpdbedittk/

[Andy Hassall]

On Tue, 9 Mar 2004 17:57:18 +0100, "PeterF" <NO*************@pf-webservices.de>
wrote:

following problem: I use a mysql query string like

$arg= " insert into ".$sometable;
$arg.=" (id, col1) ";
$arg.="values ( '$this->id', '$data' ) ";
^^^^^^
$data is a product of
serialize($some_object)

The serialization has many different symbols and I experience problems from
MySQL.
What SORT of problems?

Errors? Which ones? What messages?
Corruption? How could you tell? What did you try?
Explosions? What colour was the smoke?
I have tried to use just another string or the base64-variant of my
serialized object and it works!

So, is there some more elegant way of saving objects as strings than
encoding them after serialization
as base64?

Some would say that saving it in a schema that itself represents the
attributes of the object is more elegant, rather than serialising and storing
in an unstructured column.

What column type are you using, anyway?

--
Andy Hassall <an**@andyh.co.uk> / Space: disk usage analysis tool
<http://www.andyh.co.uk> / <http://www.andyhsoftware.co.uk/space>