|
Good find Arevos! I looked at the php.net page for mysql_real_escape_string and it does look to be a bit better than addslashes. Just remember to check the status of magic_quotes though. Sometimes programmers will assume a certain setting and if it should ever change it renders their script useless.
Truthfully though, it isnt critical that you use mysql_real_escape_string over the others. Although if your using a newer version of php, go for it! If not, don't sweat it, the important thing is that the quotes are escaped.
Nice find Arevos! ;-)
|