note 89571 deleted from function.mysql-real-escape-string by danbrown

Note Submitter: panzererik at gmx dot net ---- @LPChip: I think you are wrong. A string enclosed in backticks defines an identifier, not a string literal. Thus the condition password=foobar checks whether the values of the columns password and foobar match. In general this would cause an error as a column foobar in general will not exist and for sure this is not the behaviour you intended. You would use password='foobar'. This works fine, an unescaped backtick in a string literal is no problem, '`' is the string containing one backtick. So there is no need for mysql_real_escape_string to escape a backtick.