note 102639 added to mysqli.real-escape-string

You can avoid all character escaping issues (on the PHP side) if you use prepare() and bind_param(), as an alternative to placing arbitrary string values in SQL statements. This works because bound parameter values are NOT passed via the SQL statement syntax. ---- Server IP: 69.147.83.197 Probable Submitter: 24.15.230.97 ---- Manual Page -- http://www.php.net/manual/en/mysqli.real-escape-string.php Edit -- https://master.php.net/note/edit/102639 Del: integrated -- https://master.php.net/note/delete/102639/integrated Del: useless -- https://master.php.net/note/delete/102639/useless Del: bad code -- https://master.php.net/note/delete/102639/bad+code Del: spam -- https://master.php.net/note/delete/102639/spam Del: non-english -- https://master.php.net/note/delete/102639/non-english Del: in docs -- https://master.php.net/note/delete/102639/in+docs Del: other reasons-- https://master.php.net/note/delete/102639 Reject -- https://master.php.net/note/reject/102639 Search -- https://master.php.net/manage/user-notes.php