|
For PHP >= 4.3.0, it's recommended that for MySQL queries, the mysql_real_escape_string function is used. mysql_real_escape_string escapes a few more characters than addslashes does; I'm not sure how significant this is, but it seems like a good idea to use this function over addslashes.
|