Questions tagged [mysql-real-escape-string]
Avoid using the deprecated PHP function that escapes special characters in a string for SQL statements. It is not recommended for use in new code.
When users input data that ends up in a MySQL table, I always make sure to run it through the mysql_real_escape_string() function as recommended by PHP.net and various forum members. However, I really have no idea what this function does internally. What ...