note 27923 added to function.mysql-escape-string

You might want to consider using htmlspecialchars() with ENT_QUOTES set instead of this function. It doesn't escape quotes but instead will turn both single and double quotes into their harmless HTML entity counterparts, which I have found to be more useful and convenient in my case. -- http://www.php.net/manual/en/function.mysql-escape-string.php http://master.php.net/manage/user-notes.php?action=edit+27923 http://master.php.net/manage/user-notes.php?action=delete+27923 http://master.php.net/manage/user-notes.php?action=reject+27923