note 20377 added to function.mysql-escape-string

Can someone please clear up some problems I'm having? When I use submission from a form, and do this: echo $sDescription; exit; after <FORM> <INPUT TYPE=TEXT NAME="sDescription> <INPUT TYPE=SUBMIT> </FORM> I end up with an already escaped string. Strings from forms are ALREADY escaped, as soon as they get to my PHP script. Is this a configuration issue, or a browser issue? Can I rely on this? When I run mysql_escape_string, it does a second escape, and I end up with \\\' in my text. -- http://www.php.net/manual/en/function.mysql-escape-string.php http://master.php.net/manage/user-notes.php?action=edit+20377 http://master.php.net/manage/user-notes.php?action=delete+20377 http://master.php.net/manage/user-notes.php?action=reject+20377