Don’t use addslashes for database escapes

Filed Under (General) by Wenbert on 04-12-2007

Tagged Under : , ,

From jansch.nl:

This is not the best way to escape data. The most important reason is security. addslashes can lure you into a false sense of security. As Chris Shiflett points out, there are situations that addslashes doesn’t escape.

Use mysql_real_escape_string instead.

Read More

Leave a Reply
Subscribe to Rss Feed : Rss