Browse code

includes/mysqli_functions.php: add set_charset to query - security-related

Clarissa Walker authored on 2026/09/28 04:26:37
Showing 1 changed files
... ...
@@ -21,6 +21,10 @@ function dbconnect($dbhost, $dbuser, $dbpass, $dbname ) {
21 21
 	//mysqli_query($mysql_access, "SET SESSION sql_mode = 'NO_ZERO_IN_DATE,NO_ZERO_DATE,NO_ENGINE_SUBSTITUTION'");
22 22
 	mysqli_query($mysqli_access, "SET SESSION sql_mode = 'NO_ENGINE_SUBSTITUTION'");
23 23
 
24
+	// comment UTF8 and uncomment UTF8MB4 if needed - especially when converted to Mod
25
+    //mysqli_set_charset($mysqli_access, "SET NAMES utf8mb4;");
26
+    mysqli_set_charset($mysqli_access, "utf8;");
27
+
24 28
 	// comment UTF8 and uncomment UTF8MB4 if needed - especially when converted to Mod
25 29
     //mysqli_query($mysqli_access, "SET NAMES UTF8MB4;");
26 30
     mysqli_query($mysqli_access, "SET NAMES UTF8;");