note 20013 added to function.addslashes

You MySQL folks might also want to check out mysql_escape_string(). --------- copied from mysql_escape_string(): If you're wondering what's the difference between mysql_escape_string() and AddSlashes(), I found this from looking at the source code of MySQL 3.23.32 and PHP 4.0.6: - mysql_escape_string calls MySQL's library function of the same name, which prepends slashes to the following characters: NUL (\x00), \n, \r, \, ', " and \x1a. - AddSlashes escapes NUL, ', " and \. While mysql_escape_string seems safer, my experience shows that escaping strings with AddSlashes (which is also done automatically if magic_quotes_gpc is on) is sufficient, so it seems you can pick whichever you wish. -- http://www.php.net/manual/en/function.addslashes.php http://master.php.net/manage/user-notes.php?action=edit+20013 http://master.php.net/manage/user-notes.php?action=delete+20013 http://master.php.net/manage/user-notes.php?action=reject+20013