note 107661 added to function.addslashes

Actually I prefer to escape the SQL queries completely (then no more challenge for data security); <?php function escape_query($str) { return strtr($str, array( "\0" => "", "'" => "&#39;", "\"" => "&#34;", "\\" => "&#92;", // more secure "<" => "&lt;", ">" => "&gt;", )); } ?> // &#39;&#34;&#92; echo escape_query("'\"\\\0"); // &lt;script&gt;alert(1)&lt;/script&gt; echo escape_query("<\0script>alert(1)<\0/script>"); // See more: www.asciitable.com ---- Server IP: 69.147.83.197 Probable Submitter: 194.27.149.90 ---- Manual Page -- http://www.php.net/manual/en/function.addslashes.php Edit -- https://master.php.net/note/edit/107661 Del: integrated -- https://master.php.net/note/delete/107661/integrated Del: useless -- https://master.php.net/note/delete/107661/useless Del: bad code -- https://master.php.net/note/delete/107661/bad+code Del: spam -- https://master.php.net/note/delete/107661/spam Del: non-english -- https://master.php.net/note/delete/107661/non-english Del: in docs -- https://master.php.net/note/delete/107661/in+docs Del: other reasons-- https://master.php.net/note/delete/107661 Reject -- https://master.php.net/note/reject/107661 Search -- https://master.php.net/manage/user-notes.php