NamePros.Com - View Single Post - Image Hosting Script

Yea,'mysql_real_escape_string' is better then 'mysql_escape_string'.

Thanks for your advance!

Originally Posted by SecondVersion

mysql_escape_string is deprecated, I'd rather use something like:

PHP Code:

   <?php

 
function make_safe($value)

{

  $value = stripslashes($value);

  $value = (function_exists('mysql_real_escape_string')) ? mysql_real_escape_string($value) : addslashes($value);

 
  return $value;

}

 
?>

PHP Code:

    $db->setQuery("select * from setting where admin='".make_safe($input['user'])."' and pass='".make_safe($input['pass'])."'");