note 92649 added to function.mysql-real-escape-string

I use the following code in my database connection include file (which is of course called at the start of every page that needs to do some SQL)... Therefore, all POST and GET vars are automatically escaped before being used anywhere in SQL statements. //This stops SQL Injection in POST vars foreach ($_POST as $key => $value) { $_POST[$key] = mysql_real_escape_string($value); } //This stops SQL Injection in GET vars foreach ($_GET as $key => $value) { $_GET[$key] = mysql_real_escape_string($value); } ---- Server IP: 117.104.162.229 Probable Submitter: 58.165.90.212 (proxied: 58.165.90.212) ---- Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php Edit -- https://master.php.net/note/edit/92649 Del: integrated -- https://master.php.net/note/delete/92649/integrated Del: useless -- https://master.php.net/note/delete/92649/useless Del: bad code -- https://master.php.net/note/delete/92649/bad+code Del: spam -- https://master.php.net/note/delete/92649/spam Del: non-english -- https://master.php.net/note/delete/92649/non-english Del: in docs -- https://master.php.net/note/delete/92649/in+docs Del: other reasons-- https://master.php.net/note/delete/92649 Reject -- https://master.php.net/note/reject/92649 Search -- https://master.php.net/manage/user-notes.php