[DiscordArchive] You mean try `real_escape_string` ?
[DiscordArchive] You mean try `real_escape_string` ?
Archived author: Bogir • Posted: 2022-03-26T12:52:16.318000+00:00
Original source
You mean try `real_escape_string` ?
Archived author: Bogir • Posted: 2022-03-26T12:53:47.615000+00:00
Original source
It won't break salt and verifier? The server will be able to compare them correctly on user login?
Archived author: Foe • Posted: 2022-03-26T12:54:01.216000+00:00
Original source
I imagine it will
Archived author: Foe • Posted: 2022-03-26T12:54:24.340000+00:00
Original source
but personally I'd generate the salt without those special characters to begin with
Archived author: Foe • Posted: 2022-03-26T12:55:16.482000+00:00
Original source
or you can use something like bin2hex first
Archived author: Foe • Posted: 2022-03-26T13:05:09.538000+00:00
Original source
though bin2hex would break the cryptographically secure aspect, so I'd just escape the special SQL string operators ♂️