Re: PHP filter function against SQL injections

[Terra Frost <terrafrost () gmail com>]

jeffrey rivero wrote:
> Hello
> Good Questions
> ok for the
> 1.Single and double-quotes will be escaped by the function call 
mysql_escape_string().
>  yep but what i am passing does not have " or ' in them think more 
like or 1 = 1 and assume that your var is a number
> so the injections would look like
Why can't you just cast to an integer?