MySQL string escaping in PHP

Jess Barnes — Fri, 25 Dec 2009 14:44:21 +0000

Simple function to prepare user inputted data for inserting into a MySQL database. It simply checks if stripslashes() should be called, and then escapes the string. Basic, but handy.

function mysql_escape($string) {
    if (get_magic_quotes_gpc() == 1) {
        $string = stripslashes($string);
    }
    $string = mysql_real_escape_string($string);
    return $string;
}

PHP function to generate a slug for SEO URLs
Bash alias to search file contents

Jess Barnes » MySQL

MySQL string escaping in PHP