Re: Sanitizing potential MySQL strings with no database connection

> I don't think so since the mysql_real_escape_string() requires a connection handler.  Why > not use bind param? > Thanks. I just googled bind param but I am still a bit unclear as to what is going on. To be clear, I have a file of functions that I use in many scripts, lets call it functions.inc. One of the functions calls mysql_real_escape_string() but in order to do that it looks like I have to connect to a database. However, different scripts connect to different databases, and some do not connect to a database at all, so I cannot simple connect to a database from the functions.inc file as that will interfere with the database connections going on in the scripts including that file. -- Dotan Cohen http://what-is-what.com http://gibberish.co.il