note 98488 added to function.addslashes

Never use addslashes function to escape values you are going to send to mysql. use mysql_real_escape_string or pg_escape at least if you are not using prepared queries yet. keep in mind that single quote is not the only special character that can break your sql query. and quotes are the only thing which addslashes care. ---- Server IP: 160.75.100.7 Probable Submitter: 81.214.124.250 ---- Manual Page -- http://www.php.net/manual/en/function.addslashes.php Edit -- https://master.php.net/note/edit/98488 Del: integrated -- https://master.php.net/note/delete/98488/integrated Del: useless -- https://master.php.net/note/delete/98488/useless Del: bad code -- https://master.php.net/note/delete/98488/bad+code Del: spam -- https://master.php.net/note/delete/98488/spam Del: non-english -- https://master.php.net/note/delete/98488/non-english Del: in docs -- https://master.php.net/note/delete/98488/in+docs Del: other reasons-- https://master.php.net/note/delete/98488 Reject -- https://master.php.net/note/reject/98488 Search -- https://master.php.net/manage/user-notes.php