Using mysqli_escape_string error

Question

How come I kept receiving this errror when I am using this mysqli_real_escape_string()?

mysqli_real_escape_string() expects exactly 2 parameters, 1 given in C:\xampp\htdocs\beatbeast\reg.php on line 6

I already pass the connection, and the strings that are needed to be sanitize, but how come i keep on getting that error?

here's my code

<?php
    class Db_DatabaseUtilities{

        public static function registerAccount($conn,$username,$password,$email){
            if(!isset($conn)){
                    echo"XDDDDDDDDD";
            }
            $username = mysqli_real_escape_string($conn,$username);
            $email =mysqli_real_escape_string($conn,$username);
            $password = mysqli_real_escape_string($conn,$password);
            $hashedpass = crypt($password,$username);

            $sql = "INSERT INTO accounts ('username','password','email') VALUES('{$username}','{$hashedpass}','{$email}')";
            Db_DatabaseUtilities::perform_query($conn, $sql);
        }

        public static function perform_query($conn,$sql){
            $result_set = $conn->query($sql);
            if(!$result_set){
                die("Die Database Query Failed");
            }else{
                return $result_set;
            }
        }       
    }

RockyFord · Accepted Answer · 2012-06-24 11:41:46Z

3

first: if this is your real code you are escaping $username twice and $email not at all:

$username = mysqli_real_escape_string($conn,$username);
$email =mysqli_real_escape_string($conn,$username);//should probably be $email as second param

you have an option of two problems:

you have a bad database connection...check your connection and make sure it has the encoding set.
you have bad input data...one of your parameters may not be a valid string

I can't see any other options... Good Luck

answered Jun 24, 2012 at 11:41

RockyFord

8,5191 gold badge17 silver badges22 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

xdazz · Accepted Answer · 2012-06-24 11:29:48Z

0

Check the line 6 of reg.php.

string mysqli_real_escape_string ( mysqli $link , string $escapestr )

You need to pass the mysqli connection as the first parameter.

answered Jun 24, 2012 at 11:29

xdazz

161k38 gold badges255 silver badges278 bronze badges

2 Comments

user962206 Over a year ago

echo"XDDDDDDDDD"; that's line 6

xdazz Over a year ago

@user962206 Is the file reg.php ? line 6 don't have mysqli_real_escape_string

Collectives™ on Stack Overflow

Using mysqli_escape_string error

2 Answers 2

Comments

2 Comments

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Related