note 57894 added to function.mysql-real-escape-string

I prefer this one as is_numeric will tell 0123 is an integer and mysql will move that to 123 even if it is a varchar field. <? function anti_inject ($value,$txt=false) { if (get_magic_quotes_gpc()) $value=stripslashes($value); if (!is_numeric($value)) $value="'".mysql_real_escape_string($value)."'"; if ($txt && is_numeric($value)) $value="'".$value."'"; return $value; } ?> Add: perhaps you will need (like me, but not shown here) to use a specific Link identifier to mysql ---- Manual Page -- http://www.php.net/manual/en/function.mysql-real-escape-string.php Edit -- http://master.php.net/manage/user-notes.php?action=edit+57894 Delete: added to the manual -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=added+to+the+manual Delete: bad code -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=bad+code Delete: spam -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=spam Delete: useless -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=useless Delete: non-english -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=non-english Delete: already in docs -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes&reason=already+in+docs Delete: other reasons -- http://master.php.net/manage/user-notes.php?action=delete+57894&report=yes Reject -- http://master.php.net/manage/user-notes.php?action=reject+57894&report=yes Search -- http://master.php.net/manage/user-notes.php