note 40584 deleted from function.mysql-real-escape-string by aidan

Note Submitter: ashraf@ametry.com ---- If you are submitting directly from a form or reading from a cookie then its usually easier (if you are the admin of your server) to set make php do it for you by configuring magic_quotes_gpc. http://us3.php.net/manual/en/ref.info.php#ini.magic-quotes-gpc or you can do something a bit smarter like ; function cleanField($field){ if(get_magic_quotes_gpc()==0){ $field=mysql_real_escape_string($field); } return $field; }